Analysis
-
max time kernel
261s -
max time network
279s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
14-02-2024 15:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d_win_x64.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
d_win_x64.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
300 seconds
General
-
Target
d_win_x64.exe
-
Size
9.5MB
-
MD5
4da51a1af06db8f324d3bca8b0159928
-
SHA1
e064fbd7af80d4a65624dce35663f74cb26be3b6
-
SHA256
4462c26443d4404eb99ad7ca2c4a1455692a56ce70266b2cba4a79907cf574d9
-
SHA512
32fda37ffe6c50c2b3f256f26633f8f688cf75118e6ab1fe2097193d9135542ffcdbb5030918deb9d960574c3cc45f518de6720f48882e7896098648742b51b2
-
SSDEEP
98304:7Y8VYKIby0OgxNo89m2dxq2OXda5OGsElKJ7q:OxTfo8pdxq9daAGFlK
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 3480 d_win_x64.exe 3480 d_win_x64.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3480 d_win_x64.exe