Analysis
- max time kernel
128s - max time network
137s - platform
windows10-1703_x64 - resource
win10-20240404-en - resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system - submitted
04/06/2024, 11:22
Static task
static1
Behavioral task
behavioral1
Sample
AteraAgent.exe
Resource
win7-20240221-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
AteraAgent.exe
Resource
win10-20240404-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
AteraAgent.exe
Resource
win10v2004-20240508-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
AteraAgent.exe
Resource
win11-20240426-en
1 signatures
150 seconds
General
- Target AteraAgent.exe
- Size 142KB
- Sample240604-ngm2lsed9y
- SHA256 a96a0ba7998a6956c8073b6eff9306398cc03fb9866e4cabf0810a69bb2a43b2
- MD5 477293f80461713d51a98a24023d45e8
- SHA1 e9aa4e6c514ee951665a7cd6f0b4a4c49146241d
- SHA512 23f3bd44a5fb66be7fea3f7d6440742b657e4050b565c1f8f4684722502d46b68c9e54dcc2486e7de441482fcc6aa4ad54e94b1d73992eb5d070e2a17f35de2f
- SSDEEP 3072:bk/SImWggsVz8TzihTmmrG/GOXYsqRK3ybTXzpUTQM9/FMp:ISWB/YrRK3yb37
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4476 AteraAgent.exe