Analysis
-
max time kernel
118s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240215-en -
resource tags
arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system -
submitted
23/05/2024, 23:53
Static task
static1
Behavioral task
behavioral1
Sample
782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa.exe
Resource
win10v2004-20240508-en
General
-
Target
782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa.exe
-
Size
1.3MB
-
MD5
b10de24b2e9b26a4eb34e4edb8bf5f04
-
SHA1
efc2e64bf41a90b92f0d0eaf62eaa4bf92dc88b7
-
SHA256
782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa
-
SHA512
f3ea4759a18aa399efffacfef4f3e18f2f2815736721a9b81eda71f33baa7c6952f7d64403cae20353bca28b926ed7430ecf7e1e7b56252ef37ee23891696347
-
SSDEEP
12288:a3P/aK2vB+wYlc+pFByStv9JRa//inz86NRo1qiRlUWC4kXzVC3:a/CKABuc+pFB5z+//ufNRoZW
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2876 782c915a73c7dc46b9ebf022dccabfab1c80ec9601b501c0ee3545f4381bdfaa.exe