Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
-
submitted
31/05/2024, 04:59
General
-
Target
WxWorkMultiOpen.exe
-
Size
138KB
-
MD5
2ddfe23a170af97ebbfe8ccc260ef462
-
SHA1
2fe618d9e6e1ba56368cbdc81c20d2eb3e1be539
-
SHA256
56149c2caa7e4b648802d12d51fcd0d6523640925b44524d5261f193e7e217d6
-
SHA512
bc946566379abad7fb4d01d68277373325244d8dfa728e1c8c4150c951dc8917ce98e4d48acf1b3a9a31c9e3e6cec59e9d72fa036072b63a114ddf025169fbcb
-
SSDEEP
3072:WVgniPw13ewPXAFFOCpOiAiZNYF4sn3zckV/N+Ag0FujTXfh9v2Vht:WVgnwotoFF1pWaNYKsnFEAOBJ2Vht
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\WxWorkMultiOpen.exe"C:\Users\Admin\AppData\Local\Temp\WxWorkMultiOpen.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken