Analysis
-
max time kernel
144s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
23-06-2024 14:58
General
-
Target
Launcher.exe
-
Size
491KB
-
MD5
4ce02b07fed76a1c81814c3322a62c36
-
SHA1
0b43dd7b3aa6821698986637271f0f5cefe78c05
-
SHA256
8a78e68f25c2259b953ab81256aafe059c93c6538ad80e29d499b7ee53bc3f27
-
SHA512
7d0f7b5500c506788e2358e9d2472083033cd79ccd2195f53a7ad5c024ccb6d53fa95b667bd78c0e33f79a1ecb66383c86b2685f09dd6bb11f743b601e2c8ea7
-
SSDEEP
12288:uoZtL+EP80viqKInDANZMK7bCqx6rhDhA/Nfg:iI82iqKInDANZMK7bCqxilA/Nfg
Malware Config
Signatures
-
Detect Umbral payload 1 IoCs
resource yara_rule behavioral1/memory/1540-0-0x0000026A1E840000-0x0000026A1E8C2000-memory.dmp family_umbral -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1540 Launcher.exe