Analysis
-
max time kernel
91s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
06-07-2024 22:02
General
-
Target
ProcessLasso.exe
-
Size
1.8MB
-
MD5
8fcf7cf04f9b344724759ee830e97ff7
-
SHA1
7e89c71637362333246cb6f7b30f34a2b7693407
-
SHA256
449c423ae1a63259989c85176dcc808f767346944eb40eac270ce27795abc1c2
-
SHA512
3acc527ac9014db980d4c511fd416e32d627f616eb09559a2c3b0cb038a86eee6adf526488053fd09e34ba66fec6109bc534178e4371147d1b23f29803668759
-
SSDEEP
24576:2XGXE/+1qw6stdHLyjToAdB4/5OH+5yU+yMj0lPj1VFLsPkUdKpVA7KykjgxDyQ3:kB+dHLcToMB4cUDHDVFAPkJVtNRi
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious use of AdjustPrivilegeToken 9 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\ProcessLasso.exe"C:\Users\Admin\AppData\Local\Temp\ProcessLasso.exe"1⤵
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken