Analysis
-
max time kernel
93s -
max time network
95s -
platform
windows10-2004_x64 -
resource
win10v2004-20240220-en -
resource tags
arch:x64arch:x86image:win10v2004-20240220-enlocale:en-usos:windows10-2004-x64system -
submitted
21/02/2024, 03:23
Static task
static1
Behavioral task
behavioral1
Sample
b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe
Resource
win10v2004-20240220-en
General
-
Target
b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe
-
Size
342KB
-
MD5
8333a0979453a3109de58b089b1e3813
-
SHA1
19f0fe97ef095af5ebe5d016869089832b73f160
-
SHA256
b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217
-
SHA512
9e473246a015123d44ab61048fdc652645977fcd5a352b1d91ad080046521bddd02b3700e35b6f30e95abc067a3e0ca46e22c6d8c4e53b9fd9dba924104a0c9d
-
SSDEEP
6144:hnJQkMDDwIyuLoiPHm/CTfKP/sB8j+V4K6QwCg9eubNnJQ:nUDMIyuLoiPGqmWDV4YwHeM
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2884 b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe 2884 b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2884 b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe"C:\Users\Admin\AppData\Local\Temp\b55734d89184434a24d04af85019fd34dc0b054f13d8fb1a16ee977aea723217.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2884