Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
27-01-2024 13:32
Static task
static1
Behavioral task
behavioral1
Sample
f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4.exe
Resource
win10v2004-20231222-en
General
-
Target
f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4.exe
-
Size
705KB
-
MD5
73aac1a1a9b6c434522fe3b0ad36b4de
-
SHA1
1de4560cdc3cc10369157d27b31aa1ce024aa0aa
-
SHA256
f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4
-
SHA512
e3376af9b4861e999336c4764f5ee7c33d8a04b1f66161d8a24e22456fa61cfcb2809992e78684b56ed2079e44b5586dd5b779204ff4dce5b3c840d391dea7c9
-
SSDEEP
12288:kW9B+VOFT0Iviu1cEftqaDpUOvw07yHTmpTwF008SzgpJCAWRXz9K1/XtQtQtF:kW9BBTB71ckJtUOv3c8Tq0C0JCAWRSlr
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1632 f3f6363a33c2340703d2337aaa28a56422e75c6436a149f30a37efdc76a9a6d4.exe