c588680b751d0c61e0cb068db13b7866d220bbf342e81ea9802939e167f5db29

Resubmissions

08-06-2024 17:43

08-06-2024 17:38

max time kernel
75s
max time network
81s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
08-06-2024 17:38

Target

Catto Boi The Quest for the Frozen Tuna (04)/Catto Boi Tuna.exe
Size

4.8MB
MD5

04ffc9acd7b43a93b76ba1d4ea559eb5
SHA1

a50510d281b9a8634ad9b8c8b05c8d00c6a18a23
SHA256

c172f666636a38790e175eef2040ddd87536959640aed6f7fb160574e345c20e
SHA512

9a5678ec461456cca6179afaab8da461a6ce9507e3883f97b426f319c6c861d4e1898f14b019defb304c11215fa13645176a08f7bc41a4002a6142c75c944f84
SSDEEP

98304:LiQuE42N00DQDHO/sc5yor5Cvpau8tYVKAfz61ca9BsC9nAMS8QVju:LRus00DQDHO/sc5yor5CvpawVVr6d1AU

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3756	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3756	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
464	Catto Boi Tuna.exe
464	Catto Boi Tuna.exe

C:\Users\Admin\AppData\Local\Temp\Catto Boi The Quest for the Frozen Tuna (04)\Catto Boi Tuna.exe
"C:\Users\Admin\AppData\Local\Temp\Catto Boi The Quest for the Frozen Tuna (04)\Catto Boi Tuna.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:464

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x470 0x490
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3756

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --field-trial-handle=4744,i,15142778360084620907,1763097090506261076,262144 --variations-seed-version --mojo-platform-channel-handle=4384 /prefetch:8
1⤵
PID:1704