Analysis
-
max time kernel
147s -
max time network
102s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
20/05/2024, 22:41
Static task
static1
Behavioral task
behavioral1
Sample
58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe
Resource
win10v2004-20240508-en
General
-
Target
58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe
-
Size
13KB
-
MD5
9a63b20fd82234bdc8e293eb0b5c5edb
-
SHA1
004902405a3c9b1d0dadd34f8746be3187b6a99c
-
SHA256
58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2
-
SHA512
14e4811c02b1bfc8431ee24b242c96ad11b5f99bf3263d2f267753b8d55f1b2d0440e9958834768c7509da1d14539d98670e1bd21cbef3aec92eac50170875ae
-
SSDEEP
192:100txo7TawvOv4YcI+kf02/SaOjtZ65bukWjdJc8AUE3QvHzL91aRZEsL4b9m4DO:GycidyQbcZ4QvTp1asb9m4ybVBu
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 29 IoCs
pid Process 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1084 58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe"C:\Users\Admin\AppData\Local\Temp\58791551e0363055c17eaee4f6df90e03d35852bfde09ecd09224834e40c46d2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1084