Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
25/04/2024, 01:18
Static task
static1
Behavioral task
behavioral1
Sample
a0bb7ccb1d327da9bd3622bd33a7c97fb72aeaae8640f29a5c7d7e8e72634759.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
a0bb7ccb1d327da9bd3622bd33a7c97fb72aeaae8640f29a5c7d7e8e72634759.exe
Resource
win10v2004-20240412-en
General
-
Target
a0bb7ccb1d327da9bd3622bd33a7c97fb72aeaae8640f29a5c7d7e8e72634759.exe
-
Size
702KB
-
MD5
00a5f26eaef5205e774b7351e70de72e
-
SHA1
7839023780814793e51bc38a439c7243070aabde
-
SHA256
a0bb7ccb1d327da9bd3622bd33a7c97fb72aeaae8640f29a5c7d7e8e72634759
-
SHA512
bd0181f6a42bb19f38ec9ca9b0dfeb934c2a9e6111859c98222d98a12ced8f509cb5f3dc0975721a293491fc895c3bd76dd223e6d680d5790be1c12a0fc1d35c
-
SSDEEP
12288:nSOFz/kh6FggLbrQXbR7jqkf1Hm7tJc0FS3jicGWVSI7dMua43Ek0cIHAN4:RFj06LaRFdGJm0Q3WKVSwdr13Ek0VA
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe a0bb7ccb1d327da9bd3622bd33a7c97fb72aeaae8640f29a5c7d7e8e72634759.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2712 a0bb7ccb1d327da9bd3622bd33a7c97fb72aeaae8640f29a5c7d7e8e72634759.exe