Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
16/07/2024, 09:58
Static task
static1
Behavioral task
behavioral1
Sample
de88188ed60d00166b2f3d872471813719f182673da88e6c1274d82b880d65e0.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
de88188ed60d00166b2f3d872471813719f182673da88e6c1274d82b880d65e0.exe
Resource
win10v2004-20240709-en
General
-
Target
de88188ed60d00166b2f3d872471813719f182673da88e6c1274d82b880d65e0.exe
-
Size
1.6MB
-
MD5
528ecae27310a1852c202d26f8998b86
-
SHA1
c76d1926fd193566a3ef3e2b8d4c494f9418d0fe
-
SHA256
de88188ed60d00166b2f3d872471813719f182673da88e6c1274d82b880d65e0
-
SHA512
05431bb901a40ad1c8fe5c68cb9cbaf60792f4c09b534d30b3df8d04382f8cbc6f5659ba69a122b476c8e62c0d293c01674773223ab4c0892ccded1f75a8253b
-
SSDEEP
12288:zI9B+V7Gt/sB1KcYmqgZvAMlUoUjG+YKtMfnkOeZb5JYiNAgAPhI:zI9BXt/sBlDqgZQd6XKtiMJYiPUI
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe de88188ed60d00166b2f3d872471813719f182673da88e6c1274d82b880d65e0.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2444 de88188ed60d00166b2f3d872471813719f182673da88e6c1274d82b880d65e0.exe