Analysis
-
max time kernel
146s -
max time network
286s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-es -
resource tags
-
submitted
05-07-2024 14:11
General
-
Target
ch/DotNetDataCollector64.exe
-
Size
186KB
-
MD5
6e4d5643ba06864ca5f9c0598cfa8c41
-
SHA1
32a47b05c6f2cf0403a118f130fa62700a6dc97e
-
SHA256
3a138fda1ec86d8795114d192613414ecc3a1702674c67da3b14ab970acfc211
-
SHA512
c45b7f06256bc2631e9917d636b2de3521f3e817d6fe6fa4ac3bc86fb5ccef408fd0a1a4a376bd80d2ba4fbbaef226d3877555ffb89760e61649f830ba6c49ad
-
SSDEEP
3072:PZ9I3HumDI7uSG009IOEMfv+K5SAgH+9gr0zKArFoeeeWA0i:PZ9qBMuSRKDEMX+qC2wti
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ch\DotNetDataCollector64.exe"C:\Users\Admin\AppData\Local\Temp\ch\DotNetDataCollector64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken