Analysis
-
max time kernel
150s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
15/04/2024, 00:45
Static task
static1
Behavioral task
behavioral1
Sample
9647d12daecee9c151759d7ae31f654ff966a34fd0ec9e8bb4ed488cc8029f0e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9647d12daecee9c151759d7ae31f654ff966a34fd0ec9e8bb4ed488cc8029f0e.exe
Resource
win10v2004-20240412-en
General
-
Target
9647d12daecee9c151759d7ae31f654ff966a34fd0ec9e8bb4ed488cc8029f0e.exe
-
Size
702KB
-
MD5
d26434b5a0d5fd194a99f16ddb5f3f8f
-
SHA1
120842e485e90d2e366728f5c5b9763f6d1d7f92
-
SHA256
9647d12daecee9c151759d7ae31f654ff966a34fd0ec9e8bb4ed488cc8029f0e
-
SHA512
f5e405ef71b0cad0f69e10a6782509093eca9fc013fd04ed9d904039b92dce795d556a779c10a51b4d4a1256dd532e93d1c4b8c73005f929d88655e9129a2d6e
-
SSDEEP
12288:pSYFz/TTFCrNDFKYmKIiirRGW2phzrvXuayM1J3AAlrAf0d83QC0OXxcpGHMki:VFj38NDFKYmKOF0zr31JwAlcR3QC0OXn
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 9647d12daecee9c151759d7ae31f654ff966a34fd0ec9e8bb4ed488cc8029f0e.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4092 9647d12daecee9c151759d7ae31f654ff966a34fd0ec9e8bb4ed488cc8029f0e.exe