Analysis
-
max time kernel
94s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20240704-en -
resource tags
arch:x64arch:x86image:win10v2004-20240704-enlocale:en-usos:windows10-2004-x64system -
submitted
07/07/2024, 12:11
Static task
static1
Behavioral task
behavioral1
Sample
a21026f606f07e8f275f115e157fb3d91fd558d2604c27fe300f6347eb22e0a1.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a21026f606f07e8f275f115e157fb3d91fd558d2604c27fe300f6347eb22e0a1.exe
Resource
win10v2004-20240704-en
General
-
Target
a21026f606f07e8f275f115e157fb3d91fd558d2604c27fe300f6347eb22e0a1.exe
-
Size
1.3MB
-
MD5
cd4650f6f6840f3d6646deb8f50d57ef
-
SHA1
8eac6be91fc594e9d843054894a9d72454f62418
-
SHA256
a21026f606f07e8f275f115e157fb3d91fd558d2604c27fe300f6347eb22e0a1
-
SHA512
b747abb4aa42394f72cc203c5e60dd4c4faaf303935bed9356ce96772161ca3bdf52d027284fab622163bce6c46a9331f8a8937bcb3ae86ea941fa0178e44930
-
SSDEEP
12288:uUiB+tEGt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPh:uUiBut/sBlDqgZQd6XKtiMJYiPU
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe a21026f606f07e8f275f115e157fb3d91fd558d2604c27fe300f6347eb22e0a1.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2664 a21026f606f07e8f275f115e157fb3d91fd558d2604c27fe300f6347eb22e0a1.exe