Analysis
-
max time kernel
152s -
max time network
280s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
-
submitted
21-07-2024 22:28
General
-
Target
DVResolve-RPC v1.0/DVResolve-RPC.exe
-
Size
163KB
-
MD5
5c2e8b94738262fcb3088c825889509d
-
SHA1
16a16978218888e4298776ee6f4c39cf4b79fdc8
-
SHA256
0aee63a30c6df7f79f940d05818ca46bcab5253a97679c8bf0e91cb22199f1cb
-
SHA512
890536418656c672e47b449702f79c6ebe12a97559efbd2fe48c7bf21d985f8f6e2610f9145e826c84ea29b1280fa782ada6d12049c630f71affc1d8bdcc9bdd
-
SSDEEP
3072:KiS4omp03WQthI/9S3BZi08iRQ1G78IVn28bSQcJI8ltnygq7Zh:KiS4ompB9S3BZi0a1G78IVjc2ctnyg6
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DVResolve-RPC v1.0\DVResolve-RPC.exe"C:\Users\Admin\AppData\Local\Temp\DVResolve-RPC v1.0\DVResolve-RPC.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken