Analysis
-
max time kernel
121s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
-
submitted
24-04-2024 14:07
General
-
Target
PCWProtectorDummy64.exe
-
Size
501KB
-
MD5
4e4009a8838142a76a1d3b7e9a72b0a2
-
SHA1
fce0ef120d20a322afbc0a0e8c942c69f2218e85
-
SHA256
3668f959946e719f5a72cc7c5311adf9e8dc5a13d94ca6e0b994d3a520adf881
-
SHA512
186de07c13518bbffc8eae9857228a4b51080fe409cd7499d9a9c1575a9cd2229c1d20418f121380e7b730ea9404595070b1b4f7ad55354472a9de49ac5a2d17
-
SSDEEP
12288:kvzgBGfHGKKZ/W25AbMomlOpMVDt9pGHNu4B2UH:UtKZHAbMoUOSQI4rH
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PCWProtectorDummy64.exe"C:\Users\Admin\AppData\Local\Temp\PCWProtectorDummy64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx