Analysis
-
max time kernel
1360s -
max time network
1154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
-
submitted
06-07-2024 19:00
General
-
Target
InstallHelper.exe
-
Size
764KB
-
MD5
92abdca748e47cb140160230b54c5a9f
-
SHA1
9f650c394477c26e9679c928e9292aff491bc460
-
SHA256
692f402c7f1cd5db5f6e7074e5068e32ca3686bfb6e4896984187230b4291238
-
SHA512
1868d4b55415c790bc7bc0ae9f85b9892056fe049d9b32b7f14f468aab1169091e15e88d1e808f9ca4e2e545ecf9b3a32ac34de7535ca3a6797adb72f7b5fac5
-
SSDEEP
12288:OnKSfbJSYCQsHi2+NgaxZfWuzJxfeQXXbSKGhT:kKMwYCQsHi2EgaxZfWuzPfXbshT
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\InstallHelper.exe"C:\Users\Admin\AppData\Local\Temp\InstallHelper.exe"1⤵
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken