Analysis
-
max time kernel
147s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
22-02-2024 00:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Trojan.GenericKD.61557131.21738.8271.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Trojan.GenericKD.61557131.21738.8271.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
SecuriteInfo.com.Trojan.GenericKD.61557131.21738.8271.exe
-
Size
3.8MB
-
MD5
c6e556ee089b70c660ab0be7c98e4473
-
SHA1
f442d95aca109dcd6b563288161a8698a7a4bc4c
-
SHA256
e5061b204babd5741ed8e331ca9daac39b6aa1f96d81b8562e8ade554224b1a8
-
SHA512
cac6e60838ad7b74abe1ff493c45d5eae07cf925afaa10af411c2c3c23a9b1e08ec736c72f53b31ea7ebf968b4809fd6a291e3033f0aa66875e8a0a7d31241f8
-
SSDEEP
98304:V2aZMV19+dg8ncRLSvycCIPe68C9/84Y80OMcP1PGqwUq:V2algqc/cJPV9PYPOMcP1PGqwUq
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 15 raw.githubusercontent.com 14 raw.githubusercontent.com -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3420 SecuriteInfo.com.Trojan.GenericKD.61557131.21738.8271.exe