Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
09/01/2024, 14:04
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PBDownForce/PBDownForce.exe
Resource
win7-20231215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
PBDownForce/PBDownForce.exe
Resource
win10v2004-20231215-en
3 signatures
150 seconds
General
-
Target
PBDownForce/PBDownForce.exe
-
Size
2.1MB
-
MD5
d8f05faf3075dcff55593d1a6b757c1d
-
SHA1
cd6f6fcb13c399786afed45c28edb8934875d90b
-
SHA256
e0b916612d2c68dfcf7bebd04db8ba74e3cf3c194db608fa93600301029d0ac4
-
SHA512
1c503515206158b54f8cf7945b4509cb5de9b85a42939a526553a81f20e2da7544d4b2c76f6e8d1732d7bda22749a4bbc83e1d50b70e303eaf059ba0a637b160
-
SSDEEP
49152:n7uvceJqSDE7vBfQi65GP841jNs7tNQxTgmstn5FeG:niJqSo9Qi65eNwNQxTgm+5cG
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 1 IoCs
pid Process 660 Process not Found -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeLoadDriverPrivilege 1828 PBDownForce.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1828 PBDownForce.exe 1828 PBDownForce.exe