Analysis
-
max time kernel
143s -
max time network
155s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
09-03-2024 01:33
Static task
static1
Behavioral task
behavioral1
Sample
3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd.exe
Resource
win10v2004-20240226-en
General
-
Target
3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd.exe
-
Size
1.5MB
-
MD5
0ff668521f65cf341351aea60a7c02f1
-
SHA1
09b835668cfd2f6a75d6826bf9ee31ff85c18550
-
SHA256
3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd
-
SHA512
0a1978b80cad7e8fbc640a2cb6630c37948a15e3dbe4ad2d8380644b5420229ad8f46c4610c1ff595e979fd8ec3fabe8d831840f5acd9ef7c08eb28eb802c1a9
-
SSDEEP
24576:6EGIZMsCOZxdW6jnaqd7YOjQ81hofN0/NpXFf2IvdvqwAOSOCpXF:6vINaqdHRa
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1956 3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd.exe 1956 3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1956 3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd.exe"C:\Users\Admin\AppData\Local\Temp\3e9c7c215db9531adc0ec115a94b98db2e078bf49ee760d871bc3319cf8a8cfd.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1956