Analysis
-
max time kernel
135s -
max time network
136s -
platform
windows10-1703_x64 -
resource
win10-20240404-en -
resource tags
arch:x64arch:x86image:win10-20240404-enlocale:en-usos:windows10-1703-x64system -
submitted
29/06/2024, 18:16
Static task
static1
Behavioral task
behavioral1
Sample
setup.zip
Resource
win10-20240404-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
__MACOSX/._setup.msi
Resource
win10-20240404-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
setup.msi
Resource
win10-20240404-en
18 signatures
150 seconds
General
-
Target
__MACOSX/._setup.msi
-
Size
176B
-
MD5
bcc9aea5548d27e3067b68b4b468f8c1
-
SHA1
44de4efd906b40f9cf54074c7563ef5cb2efb1d3
-
SHA256
cde7eb104c47a8dc05f6f88b716cf5e93da897df6908cf6b1d1f64aff325f35d
-
SHA512
8b9667440d2be116ce3f4e0bac2e0e4b69375786cc59f1b83fc5a164494e163cc9c32f86e1a4a0b70e8e9ab149150cc0215a9f00a152962b99fa26aff1e315e6
Score
3/10
Malware Config
Signatures
-
Event Triggered Execution: Installer Packages 1 TTPs 1 IoCs
pid Process 2100 msiexec.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeShutdownPrivilege 2100 msiexec.exe Token: SeIncreaseQuotaPrivilege 2100 msiexec.exe -
Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2100 msiexec.exe 2100 msiexec.exe