Analysis
-
max time kernel
144s -
max time network
163s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 21:01
Behavioral task
behavioral1
Sample
ноневклид/Majestic Rulete.exe
Resource
win7-20240221-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ноневклид/Majestic Rulete.exe
Resource
win10v2004-20240412-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
ноневклид/Majestic Ruletka.exe
Resource
win7-20240221-en
3 signatures
150 seconds
General
-
Target
ноневклид/Majestic Rulete.exe
-
Size
397KB
-
MD5
2fa6d25559c626fc508a6312e2b3fe7c
-
SHA1
9d8c7d3e4561b36cffb8d492c9e15909ff85f727
-
SHA256
abf16636d58804e05336226dfd47bc7efd5dbdfff689769afc32258bae048c9c
-
SHA512
7a78da9e89505fb99009c728a019f825e477a66e52abc9800ecc7b5eaf46e07505cb157a19c572e35b6ea946474851ef631eb6529a165fb758e959418a9ef11e
-
SSDEEP
6144:YAfEnGCEr9cUoMYS2/o0ZXYiVhhFlv6KnYE4SZ49tyvnh+g:YpnNEBPU7o05YIXfv6KYBSy9tyvwg
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2892 Majestic Rulete.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2892 Majestic Rulete.exe -
Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2892 Majestic Rulete.exe