Analysis
-
max time kernel
42s -
max time network
36s -
platform
windows10-1703_x64 -
resource
win10-20240221-en -
resource tags
arch:x64arch:x86image:win10-20240221-enlocale:en-usos:windows10-1703-x64system -
submitted
28-03-2024 00:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
L4D2 Toolbox 1.2/L4D2 Toolbox.exe
Resource
win10-20240221-en
windows10-1703-x64
2 signatures
300 seconds
Behavioral task
behavioral2
Sample
L4D2 Toolbox 1.2/Memory.dll
Resource
win10-20240221-en
windows10-1703-x64
0 signatures
300 seconds
General
-
Target
L4D2 Toolbox 1.2/L4D2 Toolbox.exe
-
Size
166KB
-
MD5
fbafe21dc1519aa27b3bab9990fc9b09
-
SHA1
f8e9a7f8a6daf045b00b08269a9554236ea866ac
-
SHA256
99629dc38bdda3f8bf0b923467201f0f27fd3f3812487dce1785353f26e53578
-
SHA512
53ff3d7e25c8bca894b7d9e5f718bd9b7fbf6cc065272f4cbb0123adefcd642a5b89632ec7d84fe45c0917726391560c546d8b1e91296ea3e77bd5bd7c82a30e
-
SSDEEP
3072:wPLqsUNXqjW9lWe8NysbXoXAcJXgKUIiCzTOsiNEkrZosEac9bTEsfzA0R8sPpCc:wj2qjWbWe8K/vpfzA0RDiYIgTO30q
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 37 IoCs
pid Process 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe 3216 L4D2 Toolbox.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3216 L4D2 Toolbox.exe