Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
21-05-2024 14:37
Static task
static1
Behavioral task
behavioral1
Sample
cb94bb9d1459fbf0d67debc9690661e182e87a391080aacf21f5795803300be0.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
cb94bb9d1459fbf0d67debc9690661e182e87a391080aacf21f5795803300be0.exe
Resource
win10v2004-20240508-en
General
-
Target
cb94bb9d1459fbf0d67debc9690661e182e87a391080aacf21f5795803300be0.exe
-
Size
1.3MB
-
MD5
43ea187924efb7abbd08377bf683fed9
-
SHA1
1ede6fe98d17cfd5e3cff150853100d5e3fa0f29
-
SHA256
cb94bb9d1459fbf0d67debc9690661e182e87a391080aacf21f5795803300be0
-
SHA512
9a340e5696f7f279330581175e0320b3a47bb0153d62089d1f97b10e79da0c845594de5f89c4ddba9ef65891184a15879eade31e2e5846496577e01793556a96
-
SSDEEP
12288:/tP/aK2vB+NMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:/BCKABHSkQ/7Gb8NLEbeZ
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
Processes:
cb94bb9d1459fbf0d67debc9690661e182e87a391080aacf21f5795803300be0.exedescription ioc process File opened for modification C:\Windows\System32\alg.exe cb94bb9d1459fbf0d67debc9690661e182e87a391080aacf21f5795803300be0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
cb94bb9d1459fbf0d67debc9690661e182e87a391080aacf21f5795803300be0.exedescription pid process Token: SeTakeOwnershipPrivilege 1664 cb94bb9d1459fbf0d67debc9690661e182e87a391080aacf21f5795803300be0.exe