Analysis
-
max time kernel
147s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08-04-2024 16:11
Behavioral task
behavioral1
Sample
setup-x86_64.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup-x86_64.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
setup-x86_64.exe
-
Size
1.3MB
-
MD5
15b60523e4bd3a52fb0617eb8c6a9859
-
SHA1
30cad5e946a181d48ab880d5d13d6fd0a7de3e58
-
SHA256
9aeacdcf8ff71e2d1a1f9b4685eac12c4de4bb312d44ddac2c7b226f5952bfde
-
SHA512
dad4fef03bd8ce946915119b763d784a8c7d6927a5aa96d45ba6729fedaf6756b5aee1a610b5100e94232bb21edcc9cc421a88bbb2a09cdf1b09f13571434528
-
SSDEEP
24576:le6lGQd9MZ3zJQ78ca+2IPqL4uFJZsJTzZAKIZZK51NmhX+S4u:zGQ/h4ePqLn5WzZAKIKXN6/
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/5100-0-0x0000000000400000-0x0000000000922000-memory.dmp upx behavioral2/memory/5100-1-0x0000000000400000-0x0000000000922000-memory.dmp upx -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeBackupPrivilege 5100 setup-x86_64.exe Token: SeRestorePrivilege 5100 setup-x86_64.exe