Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
01-04-2024 13:17
Behavioral task
behavioral1
Sample
8C64A02C90F20524920E6E5E482B5A55.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
General
-
Target
8C64A02C90F20524920E6E5E482B5A55.exe
-
Size
141KB
-
MD5
8c64a02c90f20524920e6e5e482b5a55
-
SHA1
cc0f119b3d8e6d91f6e49d9cd21df4bc6b478b52
-
SHA256
2e4d8723602c5ffc6409dceb0cb4ced2e749e374a0fcd41fe92e0fd50f817c5b
-
SHA512
45b43dace1960596f7da79f9fec0dc4189ad7d8c5c3d6f6372a6b52d5adc5077ab50e5832852b0e69c92a02b637fb96d5b2f275738a653cb1113e42a9c2a7105
-
SSDEEP
1536:VZuhD5z28TC2u8OpBPncFPAcTgbSUPH4Lh0tY7:ah0BPncKCgbSKHahoY7
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 3 IoCs
Processes:
8C64A02C90F20524920E6E5E482B5A55.exepid Process 2512 8C64A02C90F20524920E6E5E482B5A55.exe 2512 8C64A02C90F20524920E6E5E482B5A55.exe 2512 8C64A02C90F20524920E6E5E482B5A55.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
8C64A02C90F20524920E6E5E482B5A55.exedescription pid Process Token: SeDebugPrivilege 2512 8C64A02C90F20524920E6E5E482B5A55.exe