Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
15-03-2024 20:47
Static task
static1
Behavioral task
behavioral1
Sample
6dfdbf9797245f636c0df59f25968955f366a3cdd5b710d45de0ddd924360f87.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
6dfdbf9797245f636c0df59f25968955f366a3cdd5b710d45de0ddd924360f87.exe
Resource
win10v2004-20240226-en
General
-
Target
6dfdbf9797245f636c0df59f25968955f366a3cdd5b710d45de0ddd924360f87.exe
-
Size
1.8MB
-
MD5
6a86e95bec51ff3bb628aa3de2a1855e
-
SHA1
431fb0cecde7030d4f11b2bcb8ab4a65ee7a9fcd
-
SHA256
6dfdbf9797245f636c0df59f25968955f366a3cdd5b710d45de0ddd924360f87
-
SHA512
6cddca30432de57c0e1c8f1aeb454853b9046c8ae3654004cdd575927b06badd91b6ebbc3359cb48316e3416e745f7aa9b0b3954619a3ec6c2209f7ee2e265cb
-
SSDEEP
24576:WGMEVL7m1Mao3TLx+K0wV/VjcUIrYcsYkEGRsyR4SIPH3m+hlT0TKvXrauuK7jca:Wom1s3TWwVJcUIx13XlTXvRuKIJysKw
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 6dfdbf9797245f636c0df59f25968955f366a3cdd5b710d45de0ddd924360f87.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2056 6dfdbf9797245f636c0df59f25968955f366a3cdd5b710d45de0ddd924360f87.exe