Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
06/01/2024, 07:52
Static task
static1
Behavioral task
behavioral1
Sample
95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe
Resource
win10v2004-20231215-en
General
-
Target
95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe
-
Size
12.2MB
-
MD5
40f59498d82e0507621ecb9c38342d92
-
SHA1
cf59ce565b3b0a8efcf11aa5c770865830acbf60
-
SHA256
95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7
-
SHA512
05220958cfcc744c8340b628ad6cd626f3c2cb3e8e560f772b48afea982b8af22f33329880bae9125f39cced1819ffcf471149e623b788770a4b7805ae9d9fe1
-
SSDEEP
49152:IFK021v7V3FEPLQ8Z7El6y4Gh0KooN7gD6yQvTVWpx:IF5avx3FruYrh5ooXyQ
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2220 95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2220 95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe 2220 95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe 2220 95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe"C:\Users\Admin\AppData\Local\Temp\95af4e112b8c4399b69b4eee49d0f62f35a11dbc617d11b7e9bdb285cdb14bc7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2220