Analysis
-
max time kernel
149s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
20-07-2024 06:29
General
-
Target
BDDocker.exe
-
Size
41KB
-
MD5
a6101f014755b9174d9d371ef00d5336
-
SHA1
9c12ec0682bc1d72f231322c579e507679703f40
-
SHA256
b32a9676d46340936d617744f147b6bd236b173143541f5185422e0d4d69eee1
-
SHA512
1ed8c9ecaacc196f8dd2c6f11aad5a1539546e3ca160cd93cb6e837cf78df9986ff3c7b5f19baf5f33c50dd60fc108d0a74ccb423bde48524f9161f83a874f74
-
SSDEEP
768:l6GD0S62D92lCOdcIkle6004ITnyx4COY2oqVhQmOg0UrH4AI4Cy:lL0I49Mz4IGwbVOtUT4ANR
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Windows\Explorer.EXEC:\Windows\Explorer.EXE1⤵
-
C:\Users\Admin\AppData\Local\Temp\BDDocker.exe"C:\Users\Admin\AppData\Local\Temp\BDDocker.exe"2⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
-