Analysis
-
max time kernel
35s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
20-02-2024 16:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TeamViwer.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TeamViwer.exe
Resource
win10v2004-20240220-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
TeamViwer.exe
-
Size
40KB
-
MD5
8d3b4f15b8cacb9e89cb9df91b29567b
-
SHA1
fb3cf7d20a2760cea6036421e21482409000db97
-
SHA256
395d43cb45312c4abe39e482e75b8259685a1f632c543c9b8397fdf66e719611
-
SHA512
b433b7d254ad67bb4951f91decd172c345a48b50cd6d57a06c682969735cdd3d1c10f6aa5189a8e28276db229c7d7cc8c42999534bcaacbf15339835e401041d
-
SSDEEP
768:VXTutP6SdPE196WoCG0lTSp8KhZsZebTXUoHYcLrF:VTutPXzW7G0u8KhZsZebHnrF
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1080 TeamViwer.exe 1080 TeamViwer.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1080 TeamViwer.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1080 TeamViwer.exe