Analysis
-
max time kernel
150s -
max time network
38s -
platform
windows10-2004_x64 -
resource
win10v2004-20240419-en -
resource tags
-
submitted
26/04/2024, 20:53
General
-
Target
BH2Game/BH2.exe
-
Size
245KB
-
MD5
205d2ea6070e8dc3592e6c805f3b676a
-
SHA1
31a6a4e793834d5ab0f61b88d088fccc5264ebcc
-
SHA256
325b81ea2706f2e4025bd8bf3f777763e6b5710b5582f6b1bc3f4610e053f375
-
SHA512
4a3a050c8128cced2e2a296e4bb43db7eb14089290c171749a774f9203a3425e8ab025f04f5661b3e8826cf87083610ba8ff7e4f94873aa89af2facd2efa0777
-
SSDEEP
3072:uxjPTOKZBLCm4fWeHOQD31wvO3yaI2SkDI8Off825+s3wwc33Rg8bTCqW7kbcRg:mjPTHZiFWIAl8Off93wwi/CqWQbc
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\BH2Game\BH2.exe"C:\Users\Admin\AppData\Local\Temp\BH2Game\BH2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x51c 0x3cc1⤵
- Suspicious use of AdjustPrivilegeToken