Analysis
-
max time kernel
121s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
22-05-2024 02:37
General
-
Target
AutoGpuAffinity/AutoGpuAffinity/bin/PresentMon/PresentMon-1.8.0-x64.exe
-
Size
311KB
-
MD5
1f3a9e2b9bbf1788947ebd472b0509f1
-
SHA1
4e0a9951b4db4d7b2664563f6263ffb278ace5d6
-
SHA256
b06f7c48de24b43d5d73f289a95da86c3fe78689db13b72e0fe96535695b7ef9
-
SHA512
e0c832266f25760d0c5e1af6ef8206f3368dfd3f91f8544a5d6042a6fef1fe86bc46fc6d10fac18482060cca7b859c2f731c3572c71d8442d00faf469fc3baee
-
SSDEEP
6144:FB7CAKFacnshr9HBePN/6gEVS1RKp59lPrQ8d35YK:iAKFRg9HBudEVS18N2y
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\AutoGpuAffinity\AutoGpuAffinity\bin\PresentMon\PresentMon-1.8.0-x64.exe"C:\Users\Admin\AppData\Local\Temp\AutoGpuAffinity\AutoGpuAffinity\bin\PresentMon\PresentMon-1.8.0-x64.exe"1⤵
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken