Overview

overview

3

Static

static

3

Setupprogr...34.exe

windows7-x64

1

Setupprogr...34.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    136s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240412-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/04/2024, 16:13

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Setupprogram_01234.exe

  • Size

    26.0MB

  • MD5

    0d4a7cb15a175e9b381760c8ee0e3ce6

  • SHA1

    a796435b3aa8ce02bea9d04dfa197e6038d3d41f

  • SHA256

    01e9c82e9adbfb1ff84f8f6df9101c312fa45e49b8adb866ebe1711013d30712

  • SHA512

    1c0d0ac87dd8b3d979e0f3a3c8db520f4471494af3cb40e9ad08a3824620d7d6dac05ccfadaa5b8d3233f9a08dd86d917919a486a9902bdb02a363b2356dc983

  • SSDEEP

    786432:zXfKw2NSNWKkIG8ZUXwlD94Ks7EKpsOsPo1jsTvNLaWO+:z8X/KEEKfsAR0F

Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Setupprogram_01234.exe
    "C:\Users\Admin\AppData\Local\Temp\Setupprogram_01234.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    PID:4652

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads