Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
09/07/2024, 22:05
Static task
static1
Behavioral task
behavioral1
Sample
8bae1bfd5fbb24acdc0671094ac6606577d8d763fd81c4508e4ee647d27a1a9d.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
8bae1bfd5fbb24acdc0671094ac6606577d8d763fd81c4508e4ee647d27a1a9d.exe
Resource
win10v2004-20240709-en
General
-
Target
8bae1bfd5fbb24acdc0671094ac6606577d8d763fd81c4508e4ee647d27a1a9d.exe
-
Size
1.3MB
-
MD5
5394543e426613aca433b0c287312afd
-
SHA1
74e8494aee4eb7c0fabb16dd4ac989cde2e89f1d
-
SHA256
8bae1bfd5fbb24acdc0671094ac6606577d8d763fd81c4508e4ee647d27a1a9d
-
SHA512
566ea7d03ec549b7ac1879cbb439986f8ce8486421e8232a3a59591e932a09c89e30676931dc3436cf95b91681035c76c937f9d2255bffc7e4d25648f842db09
-
SSDEEP
12288:f09B+VbMTmkJR4Do07Y86gw5CtCjX+NLuFhNpBeZT3X:f09BPSkQ/7Gb8NLEbeZ
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 8bae1bfd5fbb24acdc0671094ac6606577d8d763fd81c4508e4ee647d27a1a9d.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 312 8bae1bfd5fbb24acdc0671094ac6606577d8d763fd81c4508e4ee647d27a1a9d.exe