Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
10-04-2024 13:08
General
-
Target
a3f3bc958107258b3aa6e9e959377dfa607534cc6a426ee8ae193b463483c341.exe
-
Size
40KB
-
MD5
f06387eb7c3b17154351fb3a88b9f7da
-
SHA1
fb67519e50f8885afbfbef59627557636a664396
-
SHA256
a3f3bc958107258b3aa6e9e959377dfa607534cc6a426ee8ae193b463483c341
-
SHA512
74115b173132ce56897cff8749487b4c44de6670e33c83fb4a274b1f40e5e19bb9df3d269bc3bb3093ceb7289ab29460633715eed39254dbf0ba5a55aee43c2e
-
SSDEEP
768:SQEMLEwNPSY/w7e61H5AYp36iByuhwNddbKgUfUf2hq:9Fqcq1H5Au60NwDdifUfv
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\a3f3bc958107258b3aa6e9e959377dfa607534cc6a426ee8ae193b463483c341.exe"C:\Users\Admin\AppData\Local\Temp\a3f3bc958107258b3aa6e9e959377dfa607534cc6a426ee8ae193b463483c341.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow