Analysis
-
max time kernel
93s -
max time network
97s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
10-07-2024 12:27
Behavioral task
behavioral1
Sample
get.exe
Resource
win7-20240708-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
get.exe
Resource
win10v2004-20240709-en
2 signatures
150 seconds
General
-
Target
get.exe
-
Size
150KB
-
MD5
abd6cc945e157b48ef90264ae5f68baa
-
SHA1
40a025cc1b41292b5ef491796fd61c2001e383a1
-
SHA256
1ea8a5f2df236371911746419fdeff66a2c0a05775f6903edc601bef18fe653a
-
SHA512
a6d5ba2ab352be19fb3165276b381ebd5669d40735d3fbbecd8357a9d6706dc40ebb7ada88f7deaf77a836a210e7fd0f82e6a8405c48a9fdecff50e6e9fd1768
-
SSDEEP
3072:nOWUkPfx7BEwu8MsYPLci07XfW8n7nTPEFSV0/AUa/Jx:OXy7hkAv77T0APhx
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
pid Process 3300 get.exe 3300 get.exe 3300 get.exe 3300 get.exe 3300 get.exe 3300 get.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3300 get.exe