Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
26-04-2024 11:14
Static task
static1
Behavioral task
behavioral1
Sample
06c340ba487aae5eeb9bf454cd38034bcbaf62e59225329d70e9c6d756ecea0f.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
06c340ba487aae5eeb9bf454cd38034bcbaf62e59225329d70e9c6d756ecea0f.exe
Resource
win10v2004-20240419-en
General
-
Target
06c340ba487aae5eeb9bf454cd38034bcbaf62e59225329d70e9c6d756ecea0f.exe
-
Size
705KB
-
MD5
0a31b176ab087f7ac33ab22a95667407
-
SHA1
46000110b9f2c32fb99cc0f98b633c4d82f5ba7c
-
SHA256
06c340ba487aae5eeb9bf454cd38034bcbaf62e59225329d70e9c6d756ecea0f
-
SHA512
c2ae10858e35be542e3178c2304e82a9e1ce72ec67b67bebc86426dfe8d4df745a94231cb5dd145eef809423c77baab031080158e05d7a9a136f16880aac15f1
-
SSDEEP
12288:JW9B+VAApwsHmvM9OeNSpO7zQ+AY9aqqr74wGaMyFHBToTnlII:JW9BgpwsHmvM9OeN6CzQ+Ja74wGrTnlz
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 06c340ba487aae5eeb9bf454cd38034bcbaf62e59225329d70e9c6d756ecea0f.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2208 06c340ba487aae5eeb9bf454cd38034bcbaf62e59225329d70e9c6d756ecea0f.exe