9a82839d2eac73fda6c34aabdafe8206007f3171a653ef24b363fc9cc0d1b974 | Triage

Analysis

max time kernel
149s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20240412-en
resource tags

arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
submitted
19/04/2024, 15:32

Sharing

Report Analysis Logs

General

Target

Installation_2025.exe
Size

26.1MB
MD5

c5925b297196a415718e596a69d3a861
SHA1

7924a9b77e436ec9076b8bf3f52afa01927006ef
SHA256

e905293ca9aec96ed67bb65a992957a390264e2f5173d184ee812d3ff315b9b0
SHA512

7e38151e7a463090e1a3818d994d99c33a679c0e5179b0bf7ff10971b43c53f353818f810eb1292d37d6e223d37a9269b8be20ed9120c498e0a660372d8a7a4e
SSDEEP

786432:wl04O9yTSdJNou6ob6HNakoYirG93wFho:pPLEP9gFho

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
116	Installation_2025.exe
116	Installation_2025.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	116	Installation_2025.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
116	Installation_2025.exe

C:\Users\Admin\AppData\Local\Temp\Installation_2025.exe
"C:\Users\Admin\AppData\Local\Temp\Installation_2025.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:116

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads