Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
23/05/2024, 11:54
General
-
Target
2024-05-23_163fc069a1a56a8801520a4a5cfb6eea_snatch.exe
-
Size
18.5MB
-
MD5
163fc069a1a56a8801520a4a5cfb6eea
-
SHA1
92a5dc2bbf1442d70e4a0d362eb10c1b9129837a
-
SHA256
451b9f3a0c023aaea4ae46ea13720400354de499dfefd264939ce41d9fe6c043
-
SHA512
91ca45f8ba634f828b404cfe2e1bcdbb228b416bfe7f9511c25d9b3d124fbee0ec281529baa9d64ad205f938a4e95a9d49ad22f4b4ce25ea2dc2cd4660eb2b20
-
SSDEEP
196608:SkArNKFoDMvSZ/+POfk6vUQNHkFgUotwkDdd8/ESh:0KyDMvk+POf5HfXwCddwh
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\2024-05-23_163fc069a1a56a8801520a4a5cfb6eea_snatch.exe"C:\Users\Admin\AppData\Local\Temp\2024-05-23_163fc069a1a56a8801520a4a5cfb6eea_snatch.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken