Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
-
submitted
02-06-2024 09:43
General
-
Target
ProcessGovernor.exe
-
Size
936KB
-
MD5
188915b086edb404602bf83faba84080
-
SHA1
4cd4ddc39ca6571a2ccf4cb7b4f72fd62fe35478
-
SHA256
9e200c3af08903108b0f415d1670ef359512727e9163b0541f76a351954afe65
-
SHA512
99e98fda82cdba398320845807aeceec0a1b7c43a666c1c75743c83a2b2e4f75d9bcf991e0c4af0888e9fe9bf2ce5ab646c852817b13eeebec1960de10ea9652
-
SSDEEP
6144:PimshA8pyCod0+nsoj1+aRlkREib9yegspqvxLXoZX4RiDaYQ7Vbi/31U4Zssl8r:J48s+55+awb9yeGvtXEu/biD848fN
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ProcessGovernor.exe"C:\Users\Admin\AppData\Local\Temp\ProcessGovernor.exe"1⤵
- Suspicious use of AdjustPrivilegeToken