Analysis
-
max time kernel
3s -
max time network
4s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
28/04/2024, 16:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Release/Pegasus Crypter.exe
Resource
win7-20240215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Release/Pegasus Crypter.exe
Resource
win10v2004-20240419-en
2 signatures
150 seconds
General
-
Target
Release/Pegasus Crypter.exe
-
Size
1.6MB
-
MD5
e7e7a188a7c59031c544442781c610e3
-
SHA1
292b264ac240d939b3024ba3821fe0d2de325630
-
SHA256
969788dc81521915b71eb5fcb71969f7f75817dca8d90e235b9b6ada1e3b8e2b
-
SHA512
b0da54e02d6bffd308b44d9abb3862d652213957c84fed82912b9645518b78b2f18b3d9ada0a650529f8ba8d1d67c9ce45d3d516f36c692c49c916ee7819a084
-
SSDEEP
24576:1O00V4h8gtKm7PMWXWArwboKdpyuw5D9wJWopfw+Jwz/S/6R:zIm7P/GoMgt52Wuw+W7SCR
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 4 raw.githubusercontent.com 5 raw.githubusercontent.com -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2108 Pegasus Crypter.exe