Analysis
-
max time kernel
139s -
max time network
152s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
19-07-2024 10:58
General
-
Target
InstallHelper.exe
-
Size
691KB
-
MD5
330c7059f306df4951105a7712cb24fb
-
SHA1
a19636874cbefb3a6d944d036f8a7ac819ee4b87
-
SHA256
38942339877b2d4e6acee49f70eb4f946d2e8b8a83034e31139f4ad33eb40c7f
-
SHA512
0e8a8b966fe4f813064cc01974f0e79e72cb460a45c4a80f41f4f82240f5141fa2ea2ee753e27015597dceec9c6b92529af7d3dd37a85973f42b562e45b9e459
-
SSDEEP
12288:AWLlQFBf3NANB1IXPkkkpXGVhPZV/cCbYuWlcXFDG3wVzM+KIJmy+fRnG3QMnTYg:HlcFazKWfHdYNB/rglllllCcg
Score
1/10
Malware Config
Signatures
-
Checks processor information in registry 2 TTPs 2 IoCs
Processor information is often read in order to detect sandboxing environments.
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
-
Suspicious use of AdjustPrivilegeToken 6 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\InstallHelper.exe"C:\Users\Admin\AppData\Local\Temp\InstallHelper.exe"1⤵
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken