Analysis
-
max time kernel
17s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
15-07-2024 11:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d26d7bc20b2e7f1def79c5362cee6ec0N.exe
Resource
win7-20240705-en
windows7-x64
2 signatures
120 seconds
General
-
Target
d26d7bc20b2e7f1def79c5362cee6ec0N.exe
-
Size
638KB
-
MD5
d26d7bc20b2e7f1def79c5362cee6ec0
-
SHA1
23c254725ae6e2f01ebe1563d0c475abeedbbfd1
-
SHA256
ff883874e08e4f5e12656d62d9a6d500bc034c53162106f6d62ba6cd4540e7f3
-
SHA512
02297ee6f28bcc7efad287de98fb833f502d607b4e93cba52bd924b3b4876d41ebf666f1c00c8ea83fd7c488840fd88706ad495281161c2718ce7b843b3a29df
-
SSDEEP
12288:5t+p/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXREHa:zA/i328ab4F+rM/aXq6bJfBUam6
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe d26d7bc20b2e7f1def79c5362cee6ec0N.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2244 d26d7bc20b2e7f1def79c5362cee6ec0N.exe