Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
13-07-2024 03:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3ea011c27cdee1bca016c2bc6f1948e0N.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
3ea011c27cdee1bca016c2bc6f1948e0N.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
120 seconds
General
-
Target
3ea011c27cdee1bca016c2bc6f1948e0N.exe
-
Size
772KB
-
MD5
3ea011c27cdee1bca016c2bc6f1948e0
-
SHA1
4b5dc219eebb1825c3cb06ac807740038e028e49
-
SHA256
7199ca72ec590b32df71486e8f338088b3d1c87a7abc65756f627aae6e234287
-
SHA512
6b85c2ee1aaa112d36e71979e69ce0973d5b4f84b2b8ef593bc09db743b9956189b4c5a2b08f611eff948254a1168c4845e45cbca34585954410412516d98e48
-
SSDEEP
12288:3aFjd3TcFyn/7Iw5KJNTpWSgN/wwRN0UL0G/TVOo3HC75nSE33b9YvFH:3a9d3TcQ7IwsdCN/j2GLl3iFSE33b9
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 3ea011c27cdee1bca016c2bc6f1948e0N.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 3032 3ea011c27cdee1bca016c2bc6f1948e0N.exe