Analysis
-
max time kernel
151s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
12-01-2024 14:20
General
-
Target
tmp.exe
-
Size
188KB
-
MD5
cdb5da91ed9624691148563d0c234e06
-
SHA1
fd12f9d82869b65184d4bbe76119f623a9746303
-
SHA256
cb1ae846ff0cf850daca17d92289cbbcd099f5ea3b68c3f3877409b8c4df2b44
-
SHA512
2f773775f0b4b83b8a8ebd0c88831d7588c06c8733fbc1571086f568e0226b5ba27305cf89f3a338727dc3abcc8aeb1135de2353b94c32a953a91339da78e88a
-
SSDEEP
3072:9vpNmiRDCk5ZrOtYKU040PK22OWTLgcaSU9GcZgG3f/F/pstBaDqwONnct437Blt:9p15ZrcNP32lgB/F/p/uwONct43j92Ut
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\tmp.exe"C:\Users\Admin\AppData\Local\Temp\tmp.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx