Analysis
-
max time kernel
118s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
25-06-2024 17:57
General
-
Target
e4ac85654a88cad0e12b77902bdd372551fb1c56f9e98a863dcfe79861ccbaf4.exe
-
Size
1.8MB
-
MD5
9ab6120cab1d4e4f0427f153d6aaf403
-
SHA1
3448c825c68a971e719b33dfe2c77b3034fddba7
-
SHA256
e4ac85654a88cad0e12b77902bdd372551fb1c56f9e98a863dcfe79861ccbaf4
-
SHA512
3cd31dff776c3e5b2cd776c480f7025d60b71889bc7b30d9f27e31c37f4a49aa6936146ae9ebbc42676c6b9205a8603684b2da48eef2ee8d7a332cc1b1c84c95
-
SSDEEP
24576:jwUOwcWtXrvDiEmrBj2JnR6Exi874DeCq4H1/cgX2HOEwhjHX57WlAVq7aAu4DQh:zHnji88iCq4HBc7vwZNW6VqTx
Score
4/10
Malware Config
Signatures
-
Drops file in Windows directory 2 IoCs
-
Suspicious behavior: LoadsDriver 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\e4ac85654a88cad0e12b77902bdd372551fb1c56f9e98a863dcfe79861ccbaf4.exe"C:\Users\Admin\AppData\Local\Temp\e4ac85654a88cad0e12b77902bdd372551fb1c56f9e98a863dcfe79861ccbaf4.exe"1⤵
- Drops file in Windows directory
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx