Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
12-06-2024 16:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Adminstor.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
120 seconds
Behavioral task
behavioral2
Sample
Adminstor.exe
Resource
win10v2004-20240611-en
windows10-2004-x64
0 signatures
120 seconds
Behavioral task
behavioral3
Sample
Adminstor.exe
Resource
win11-20240611-en
windows11-21h2-x64
0 signatures
120 seconds
General
-
Target
Adminstor.exe
-
Size
908KB
-
MD5
425693580891a23a46f68811460b0b4f
-
SHA1
3d6504b5de455abf0a3c37c5b1e8382542e47e1c
-
SHA256
1517475f26721fca696dc891b6e16d2c3b9f7f70ae0183f6915da03cf2085f68
-
SHA512
67a2cbf64615f012616ec7e8bb24ff5e3ad111ae0029fda23d1f0bb8afed07118fc8cf84056b0f0efb9333646e0f5d7caef644eacaba8da4b48dccccdf7c296a
-
SSDEEP
24576:lu1cnLdt/9l3XTsN25ikchmei/l9OixU18WmqIPMCLh:gS3P3jsQ5ikchcgw9WQPB
Score
5/10
Malware Config
Signatures
-
Suspicious use of NtSetInformationThreadHideFromDebugger 29 IoCs
pid Process 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe 1196 Adminstor.exe