Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
29/01/2024, 03:33
Static task
static1
Behavioral task
behavioral1
Sample
26753a172b2587afec4d41f5fa1e922c48fee3a4433cbd088196719a3af028a9.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
26753a172b2587afec4d41f5fa1e922c48fee3a4433cbd088196719a3af028a9.exe
Resource
win10v2004-20231215-en
General
-
Target
26753a172b2587afec4d41f5fa1e922c48fee3a4433cbd088196719a3af028a9.exe
-
Size
1.5MB
-
MD5
2942bdef76cc57bf2727d2987d048d2a
-
SHA1
f16e547cd6e5467727fe8d60248f4a951040cf3a
-
SHA256
26753a172b2587afec4d41f5fa1e922c48fee3a4433cbd088196719a3af028a9
-
SHA512
30f1727df3cbe538494dec4bd85161719420a6cdd3d49f9edc2400a1789e1acca655387ab22b775e80d6feb309f0c9271f96087093d831227dfb4a36ba7bca1a
-
SSDEEP
12288:5BP/aK2vB+neSMIO74u8k7UtnzPgGeB0dPoIlaNyF/ofCVGGfX134R9kMKy:5VCKABwet/HU9zPjeidP1Yi/dGyA
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 26753a172b2587afec4d41f5fa1e922c48fee3a4433cbd088196719a3af028a9.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2932 26753a172b2587afec4d41f5fa1e922c48fee3a4433cbd088196719a3af028a9.exe