Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
24-04-2024 14:07
General
-
Target
PCWProtectorDummy.exe
-
Size
408KB
-
MD5
f0d735ccdea791ac2f224eb12c58c906
-
SHA1
889c921de73abba29dc6e159321ccd73f60250cd
-
SHA256
22cb915e9a47092276c118b18b9ea6248c5b4822056ee9ae22df47d1bcc2cc45
-
SHA512
f744755ed2bc94990c3159601dd893293c4fe69138ea4c3dbbf5546c4e2f7e41ed4db55e3d28ba34101c2ef422054110263f183f48490257275dafbbd979ea08
-
SSDEEP
12288:9gI45pFA+X5GQ90mh/mlVN3cK9pGHNu4B2U7:2I45s+8Q900mlVoI4r7
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PCWProtectorDummy.exe"C:\Users\Admin\AppData\Local\Temp\PCWProtectorDummy.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx