Analysis
-
max time kernel
122s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240419-en -
resource tags
arch:x64arch:x86image:win7-20240419-enlocale:en-usos:windows7-x64system -
submitted
26-05-2024 13:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a200de661e677b3e4cfcf1ef5ad9e5aef20e121c9d22215fa7e1889e91dad944.exe
Resource
win7-20240419-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a200de661e677b3e4cfcf1ef5ad9e5aef20e121c9d22215fa7e1889e91dad944.exe
Resource
win10v2004-20240508-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
a200de661e677b3e4cfcf1ef5ad9e5aef20e121c9d22215fa7e1889e91dad944.exe
-
Size
1.3MB
-
MD5
db940e05ae557c3f06e65681573cbccb
-
SHA1
0a96f1326584c780947460ddb74bf25b4f7022ab
-
SHA256
a200de661e677b3e4cfcf1ef5ad9e5aef20e121c9d22215fa7e1889e91dad944
-
SHA512
fcb3359e651af7dce61bb0a59870bc4c4bb66c8b2a74b49dd2b71ba893183b03fb3e07b300f019e358c3904da510c54d36aa5ef3d51a339ece644041cad5792e
-
SSDEEP
24576:OQCKABA7ZimDRw5BcEXE0Ij15B/qB2N8Z8:OFKkA79DRABcEX6B/qh
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe a200de661e677b3e4cfcf1ef5ad9e5aef20e121c9d22215fa7e1889e91dad944.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1340 a200de661e677b3e4cfcf1ef5ad9e5aef20e121c9d22215fa7e1889e91dad944.exe