Analysis
-
max time kernel
145s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
13/03/2024, 17:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c67c5c6508f0015e0f05b9367c7e2e32.exe
Resource
win7-20240215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c67c5c6508f0015e0f05b9367c7e2e32.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
c67c5c6508f0015e0f05b9367c7e2e32.exe
-
Size
692KB
-
MD5
c67c5c6508f0015e0f05b9367c7e2e32
-
SHA1
d3829560d95a2b4d1b2630c681ffbc871db972f6
-
SHA256
dd56f11be63a7c9abc5713be2e00a934d72410aea76b6d2404e2be2b6b73be14
-
SHA512
49e28e2cef3344b3def8b9a0a6ceaeeb7f09245371ff7d4e5c41acc56fb3da80ec73c43ee60afd84790830ed1b5e1b7e8934e927cc7e9632be9276185f9c50b2
-
SSDEEP
12288:9EDCJJDXb8qWvvMyesvleMkWzChpBTfgYvVtcgwSuLnKtTAwurwu9:9mQGbvNvjkJPKuMlXNwurwu9
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 22 IoCs
pid Process 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4912 c67c5c6508f0015e0f05b9367c7e2e32.exe