Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
06/07/2024, 11:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ed109500aecfa5cdfb97ff60f4eb67f2451d311b07bf1cd986c9df78fa118a36.exe
Resource
win7-20240508-en
2 signatures
150 seconds
General
-
Target
ed109500aecfa5cdfb97ff60f4eb67f2451d311b07bf1cd986c9df78fa118a36.exe
-
Size
1.3MB
-
MD5
3c0294a22c91f72c905169f919fa23c9
-
SHA1
5202094771fe09c2fe4b6cb9d5468f850c094c13
-
SHA256
ed109500aecfa5cdfb97ff60f4eb67f2451d311b07bf1cd986c9df78fa118a36
-
SHA512
e015e53a25b51b444e2397447633440f7420f91e73ed3d8667738b4c296eefcf0651f5bc47c345ba3cc98d731883cf3483854fa411c748e4a291418f3bc770e0
-
SSDEEP
12288:lEiB+tMUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8u:lEiBPatr0zAiX90z/F0jsFB3SQk3
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe ed109500aecfa5cdfb97ff60f4eb67f2451d311b07bf1cd986c9df78fa118a36.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 1868 ed109500aecfa5cdfb97ff60f4eb67f2451d311b07bf1cd986c9df78fa118a36.exe