Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
12/07/2024, 01:05
Static task
static1
Behavioral task
behavioral1
Sample
741cd5aa452711bc138726d252f003ab1b595440a5cae9ca56e0244333203a2e.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
741cd5aa452711bc138726d252f003ab1b595440a5cae9ca56e0244333203a2e.exe
Resource
win10v2004-20240709-en
General
-
Target
741cd5aa452711bc138726d252f003ab1b595440a5cae9ca56e0244333203a2e.exe
-
Size
705KB
-
MD5
16530caf273665b1c95e4003505f956d
-
SHA1
100595046cad7f8ea037c2cb2e11fec38dff8fc2
-
SHA256
741cd5aa452711bc138726d252f003ab1b595440a5cae9ca56e0244333203a2e
-
SHA512
2c7ebcfc05250197773a5d5666925af7e6dd34a8273f07cfb234dbf160f7bca8ca06b2c0a4c27cafc18b799df942840b995ecef50653e61115b73c291e1cbc2f
-
SSDEEP
12288:qW9B+Vv4WCIkeRlk7ugd1EOFcNW2f+zRIxzA0RJ4P3Zu/t4ZJ0FSlg6BdLET7bIV:qW9BI4WHRlMugdD+JsRgZRJ4fM430EgM
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 741cd5aa452711bc138726d252f003ab1b595440a5cae9ca56e0244333203a2e.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2716 741cd5aa452711bc138726d252f003ab1b595440a5cae9ca56e0244333203a2e.exe