Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240426-en -
resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system -
submitted
23-05-2024 01:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
NewTweakOrderV1.06_Patch0.6E/NewTweakOrder.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
NewTweakOrderV1.06_Patch0.6E/NewTweakOrder.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
NewTweakOrderV1.06_Patch0.6E/NewTweakOrder.exe
-
Size
2.1MB
-
MD5
8c79c40a9b130a5251bd2dac434ef55d
-
SHA1
2ab4a87f48ce502c1a3383fc468d961831c681ad
-
SHA256
b93a3c0ea9a498a4c9bc4d943d58c59dbeeafe7bab7080b0d722ad5a50228625
-
SHA512
2cdc3c8543d1dfbac3d5bcb76d1c19b967b7e6f9c0db9adbfc28b62f0dadb8fe722e84131794bcadfb030a8663486045e71a447f7e7ec30f070821cf134763fa
-
SSDEEP
3072:cxWibGT9HCy5KPmHorzdkMv9sV0BPukgXGWyUmHIHT78So9Jl:0dbGT9HcHd19sUd5WyUmHIHT7BQ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 38 IoCs
Processes:
NewTweakOrder.exepid process 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe 872 NewTweakOrder.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
NewTweakOrder.exedescription pid process Token: SeDebugPrivilege 872 NewTweakOrder.exe