Analysis
-
max time kernel
1s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
06/01/2024, 06:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
458f78c4a22fcfce04e16b6836c90fda.exe
Resource
win7-20231129-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
458f78c4a22fcfce04e16b6836c90fda.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
458f78c4a22fcfce04e16b6836c90fda.exe
-
Size
14.1MB
-
MD5
458f78c4a22fcfce04e16b6836c90fda
-
SHA1
cbf5cad2e088bc78ce36dbe6906fd4fee6eecaad
-
SHA256
3f45f1d83d236aefd82cc47e77540518f92161bf7bba431c4cb7efab2a2647d6
-
SHA512
3f66fdff5f9eec273c372da48f97ec1760b98e86b8cd1d96f60daca745cfeab46a35a78e22ac9da99dcaf221f08cf8031a8f5f75287b87159f935426291faca0
-
SSDEEP
196608:f88mbmIklyu9YIk1Ig7HGoAhLK8TNY36p4cGqH3G8MsedhEmAYUNbdLrp74NClzB:Zw0h1hhL9237+BDBYUNb74kd
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
pid Process 2856 458f78c4a22fcfce04e16b6836c90fda.exe 2856 458f78c4a22fcfce04e16b6836c90fda.exe 2856 458f78c4a22fcfce04e16b6836c90fda.exe 2856 458f78c4a22fcfce04e16b6836c90fda.exe 2856 458f78c4a22fcfce04e16b6836c90fda.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2856 458f78c4a22fcfce04e16b6836c90fda.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2856 458f78c4a22fcfce04e16b6836c90fda.exe 2856 458f78c4a22fcfce04e16b6836c90fda.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\458f78c4a22fcfce04e16b6836c90fda.exe"C:\Users\Admin\AppData\Local\Temp\458f78c4a22fcfce04e16b6836c90fda.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2856
-
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2436 CREDAT:275457 /prefetch:21⤵PID:2836
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" -startmediumtab -Embedding1⤵PID:2436