Analysis
-
max time kernel
149s -
max time network
114s -
platform
windows10-2004_x64 -
resource
win10v2004-20240221-en -
resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system -
submitted
23-02-2024 18:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Stand.Launchpad.exe
Resource
win7-20240220-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Stand.Launchpad.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
Stand.Launchpad.exe
-
Size
73KB
-
MD5
f372fcbce87be20833fd4acfd293cef9
-
SHA1
56a947b3a75f2630dbf945e92a45d3bb92f10005
-
SHA256
51c1241870f14b654b089c270af03a0176f1ab4d039de955c1cec169cb1e83a5
-
SHA512
96e8a701fd41f7dbeb4bc625c8e1afa7398e3d838082e2ef2862911f8eebc0c3d4bcd0ddbd4130d36a7ab2b4ea53f04a95c10447291b128906b77a95c2753339
-
SSDEEP
768:ei09avh9tuA+NDqHZIbmndydfg1dZrgkwdefeQIc5tul5scYhb:P9ztiNWIbmnv1dZrgr0Dyl5scmb
Score
8/10
Malware Config
Signatures
-
Downloads MZ/PE file
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe 1176 Stand.Launchpad.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1176 Stand.Launchpad.exe