Analysis
-
max time kernel
15s -
max time network
16s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-04-2024 01:25
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Unconfirmed 371473.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Unconfirmed 371473.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Unconfirmed 371473.exe
-
Size
1.8MB
-
MD5
9368e4bd2bb1c0d05a6f0c312de0faf7
-
SHA1
09e0b7dbb79549efc63cd578aed328fa036db89d
-
SHA256
f7a5c026c26077105ea99fb2a0b7708fbfe05b618abf276fc141d13e87edae5b
-
SHA512
0222f427df688f96da77b48e9bb1081ea2b9c1572297ec43381f6431e069a092b6587476b91158b799f0db165ccfc03f0f6436d96ce5e51b65c0a68354e111da
-
SSDEEP
24576:6VJO5a3ljDo+cl8Y0Vffy0gEtAG3sGv3MzY8Rk:6XNBDoLPB0RtAlU3h8
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2000 Unconfirmed 371473.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2000 Unconfirmed 371473.exe