Analysis
-
max time kernel
120s -
max time network
128s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 22:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
22b8aef6cd9acee95b143c9faadf59daa28943ecafc3f0a13f125aa272da7733.exe
Resource
win7-20240221-en
2 signatures
150 seconds
General
-
Target
22b8aef6cd9acee95b143c9faadf59daa28943ecafc3f0a13f125aa272da7733.exe
-
Size
706KB
-
MD5
b4909147f40108e5f6ea9aaa216adf82
-
SHA1
796d1951015823d977a18c492b7319cd1a845e4e
-
SHA256
22b8aef6cd9acee95b143c9faadf59daa28943ecafc3f0a13f125aa272da7733
-
SHA512
165063ff3ce5c687848e6e58d0bd604f72493a6d13adb5190d6578feaa1c0e41b97e7c96c7cef61da10c5a6b7762f42f78c93da4fdc78293bddb0c74feca3f5a
-
SSDEEP
12288:LWiB+tmFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMki:LWiBt8NDFKYmKOF0zr31JwAlcR3QC0O3
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 22b8aef6cd9acee95b143c9faadf59daa28943ecafc3f0a13f125aa272da7733.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2296 22b8aef6cd9acee95b143c9faadf59daa28943ecafc3f0a13f125aa272da7733.exe