Analysis
-
max time kernel
0s -
platform
windows11-21h2_x64 -
resource
win11-20240221-en -
resource tags
-
submitted
14/03/2024, 22:51
General
-
Target
void-external.exe
-
Size
2.9MB
-
MD5
23b396bac3693ce0ac92bdb99008d9aa
-
SHA1
a380de0db2298fa6d8ec0325168d6f1b7e600870
-
SHA256
642c6d8e3ec9f4806ee4d7d111f477ea871b77a91997290225201b9d6ae83058
-
SHA512
6d3cb7ea9b27aec61d02def8e0b88ac5f468b761cc2a2f5fc1a5f4760643d8d59f3d029ced8ab16ee2c4454a55e2e05aaa8c05acaa58f2bfc2d90d6d9bf632ce
-
SSDEEP
49152:8j5Heuqyaa+V3jgJWnB1ag0KkMb7KSRIin6ea8aplC:8peufaaPY1H0ofRWplC
Score
8/10
Malware Config
Signatures
-
Sets service image path in registry 2 TTPs 1 IoCs
-
Suspicious behavior: LoadsDriver 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\void-external.exe"C:\Users\Admin\AppData\Local\Temp\void-external.exe"1⤵
- Sets service image path in registry
- Suspicious behavior: LoadsDriver
- Suspicious use of AdjustPrivilegeToken