Analysis
-
max time kernel
120s -
max time network
132s -
platform
windows10-1703_x64 -
resource
win10-20231220-en -
resource tags
-
submitted
10/01/2024, 13:18
General
-
Target
Nanami Win7 for Win10/5- Windows Media Center/WMC-V8.8.2/bin/NSudoC.exe
-
Size
18KB
-
MD5
402bf6cfd68bc1d019b3ed4022771361
-
SHA1
84f5645b4a7e1fe8abbfbb52a89b80cf53b3b538
-
SHA256
b4dcfb4e16367ea6a02b4e06314827604bd44b4d1f5c0d66ad340e3dc0572423
-
SHA512
0201c1fc1eb25f3a722eeea1187115fa4d62cf4d1516124115cdc95c4fa07e3fc1e31f257b2ba3096ea162d516848bd434ad2159f426bd1251841eeb63ac932f
-
SSDEEP
384:1T8V4eLnas6yU6fUS78T9ziZg0sIrBWQWV0A4VEa2GeYNwclhqN5UW3O:1T8V4eas6vWSHN5re
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Nanami Win7 for Win10\5- Windows Media Center\WMC-V8.8.2\bin\NSudoC.exe"C:\Users\Admin\AppData\Local\Temp\Nanami Win7 for Win10\5- Windows Media Center\WMC-V8.8.2\bin\NSudoC.exe"1⤵
- Suspicious use of AdjustPrivilegeToken