Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
13-03-2024 14:23
Static task
static1
Behavioral task
behavioral1
Sample
8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e.exe
Resource
win10v2004-20240226-en
General
-
Target
8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e.exe
-
Size
767KB
-
MD5
9d62dd6a9803c8f632674ae0c0749b87
-
SHA1
4002a60ba709b72e24346fa92357f3a930b08385
-
SHA256
8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e
-
SHA512
eae5bb8f8c9b5a05ec4cf790e3521594093c41f70e595fa9ca54e378af59c1c9092e85521fbe06476898f21036c13ed785247ed894c54c9bd44dafc32278f0af
-
SSDEEP
12288:Z7gKNkhm/JuyXnPB+h8WH53JW2gh92q5H8k/jLUKciwGEBg/jKypVrtvzESIG:Z7zNkhm5PBX4JW2Q2tA+Bg/jNRV
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2880 8c2c5c4416a0749fbbea6bd986578002e0566a1a3f7012a42699c02f162c775e.exe