c588680b751d0c61e0cb068db13b7866d220bbf342e81ea9802939e167f5db29

Resubmissions

08/06/2024, 17:43

08/06/2024, 17:38

max time kernel
1788s
max time network
1802s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
08/06/2024, 17:43

Target

Catto Boi The Quest for the Frozen Tuna (04)/Catto Boi Tuna.exe
Size

4.8MB
MD5

04ffc9acd7b43a93b76ba1d4ea559eb5
SHA1

a50510d281b9a8634ad9b8c8b05c8d00c6a18a23
SHA256

c172f666636a38790e175eef2040ddd87536959640aed6f7fb160574e345c20e
SHA512

9a5678ec461456cca6179afaab8da461a6ce9507e3883f97b426f319c6c861d4e1898f14b019defb304c11215fa13645176a08f7bc41a4002a6142c75c944f84
SSDEEP

98304:LiQuE42N00DQDHO/sc5yor5Cvpau8tYVKAfz61ca9BsC9nAMS8QVju:LRus00DQDHO/sc5yor5CvpawVVr6d1AU

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3468	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3468	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
392	Catto Boi Tuna.exe
392	Catto Boi Tuna.exe

C:\Users\Admin\AppData\Local\Temp\Catto Boi The Quest for the Frozen Tuna (04)\Catto Boi Tuna.exe
"C:\Users\Admin\AppData\Local\Temp\Catto Boi The Quest for the Frozen Tuna (04)\Catto Boi Tuna.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:392

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2c8 0x2ec
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3468

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3704 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
1⤵
PID:4480

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3708 --field-trial-handle=2252,i,16022092570067181109,3235558581947505669,262144 --variations-seed-version /prefetch:8
1⤵
PID:3452