Analysis
-
max time kernel
125s -
max time network
52s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
-
submitted
19-06-2024 16:40
General
-
Target
trichloromethane.exe-Malware-main/trichloromethane-safety/Release/trichloromethane-safety.exe
-
Size
83KB
-
MD5
1453f56916c0ea96b9ba5b49f09757e2
-
SHA1
3e25edc13b69e5db4769f061f586e42b812996bf
-
SHA256
da79e0317881f0600ddaddf593184b1e7d6eb54604de089e4d625741e21c004b
-
SHA512
37febf9c7bd3f35b45de356e8dc92a9bd5e065471669cb9afdb7048308df0c852b3cbfc5f2a3cab2887d67c9dab4f2fb2bb21ee9de42d13b700784367d1f8ca6
-
SSDEEP
1536:X5RkE0HODVj5XVgyi31RRzuo3tpwOcr2zS5KTV8yYJcsWrcd6/MAedu:X590HODVViFRRz3dpxe2zSwTXoj6/Mz0
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\trichloromethane.exe-Malware-main\trichloromethane-safety\Release\trichloromethane-safety.exe"C:\Users\Admin\AppData\Local\Temp\trichloromethane.exe-Malware-main\trichloromethane-safety\Release\trichloromethane-safety.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x49c 0x4681⤵
- Suspicious use of AdjustPrivilegeToken