Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
25/04/2024, 16:38
Static task
static1
Behavioral task
behavioral1
Sample
ea3cd1a54a35fb5ca0c8f19586295d676deec6cff38b993501afd6da7730df68.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ea3cd1a54a35fb5ca0c8f19586295d676deec6cff38b993501afd6da7730df68.exe
Resource
win10v2004-20240412-en
General
-
Target
ea3cd1a54a35fb5ca0c8f19586295d676deec6cff38b993501afd6da7730df68.exe
-
Size
914KB
-
MD5
e9437db0faebaae332d1d61b018084a9
-
SHA1
8ddb4915df6372bdfd8429f0469a59a92f2a8324
-
SHA256
ea3cd1a54a35fb5ca0c8f19586295d676deec6cff38b993501afd6da7730df68
-
SHA512
b1ee72b5529a8ee3bf232ac8fc2a4ec7ca597109328fc051c95b04e2ae64bd75a9e101d8d89add3d9c53bb0e17c6aeeabe28f0b752635684ee7577e2881723d9
-
SSDEEP
24576:iNWT5PQ2aQ/D+uP0NjLMLxfjOpeZJL223G2QiMe8:iNCeAM9LMNLRZJL2222Q08
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2548 ea3cd1a54a35fb5ca0c8f19586295d676deec6cff38b993501afd6da7730df68.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2548 ea3cd1a54a35fb5ca0c8f19586295d676deec6cff38b993501afd6da7730df68.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ea3cd1a54a35fb5ca0c8f19586295d676deec6cff38b993501afd6da7730df68.exe"C:\Users\Admin\AppData\Local\Temp\ea3cd1a54a35fb5ca0c8f19586295d676deec6cff38b993501afd6da7730df68.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2548