Analysis
-
max time kernel
93s -
max time network
122s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
13/03/2024, 21:19
General
-
Target
CheatEvolution/DotNetDataCollector64.exe
-
Size
205KB
-
MD5
a2c0b5d0d9e5c2a2c774e8b587850447
-
SHA1
c8aa4cb01676d57b34aab22c7fd018b63dff6892
-
SHA256
f0f3d0fad632d9ddac8ff0b4eaec20094fa0f9abddf784954dfbb0723a997f21
-
SHA512
85f4aeb562424abf0e2bc5ede0cdf0052fbb15e7df70f691c11b06171a8a45a6672c2c688cd5b6ffebee16c36fdac7978e39ca04f8c29f75d588d2aca3599395
-
SSDEEP
3072:vWMJUr2f2Im9kj/FqgmHpJ1/YCVuIB9Vxv7bn1UC9gfkCeEWHFP0jHzP0Q:vWc02f2R6FqgoJ1boIPRUsfGjQQ
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\CheatEvolution\DotNetDataCollector64.exe"C:\Users\Admin\AppData\Local\Temp\CheatEvolution\DotNetDataCollector64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken