Analysis
-
max time kernel
145s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
19/03/2024, 19:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d6ec4fa43ceac4c410a622e6dd73acd8.exe
Resource
win7-20240215-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
d6ec4fa43ceac4c410a622e6dd73acd8.exe
Resource
win10v2004-20240226-en
2 signatures
150 seconds
General
-
Target
d6ec4fa43ceac4c410a622e6dd73acd8.exe
-
Size
737KB
-
MD5
d6ec4fa43ceac4c410a622e6dd73acd8
-
SHA1
2a609f6cd4d37e4202da7ba46bb60af68dbefbc9
-
SHA256
dc10965909caaf295815b1b779fe4c63a46aa7a0f2187f0ecc364b08378f3fda
-
SHA512
6e91c87bc5daeefbbc1ed605f64803f1115685cea3da8e15c887c2943bf0b0764d41d181e0598027ce985c1643057ac60521a97a2b3b67f557093a03fe2c5d77
-
SSDEEP
12288:xRbu/jtigh+M9lbfx3yABdvStQiH4u3cS6e/X/X/X/X/X/m:fOsghzh/WS6fcSI
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 11 IoCs
pid Process 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1660 d6ec4fa43ceac4c410a622e6dd73acd8.exe