Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
21-07-2024 07:49
Static task
static1
Behavioral task
behavioral1
Sample
51831fecc07d86d5617156b798c4bdc72bc49c03af49987616ff7fd216cec1c5.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
51831fecc07d86d5617156b798c4bdc72bc49c03af49987616ff7fd216cec1c5.exe
Resource
win10v2004-20240709-en
General
-
Target
51831fecc07d86d5617156b798c4bdc72bc49c03af49987616ff7fd216cec1c5.exe
-
Size
705KB
-
MD5
392125f3615ab8e06f64441f68efdd09
-
SHA1
083e81b1ecb8173b4a7147cf9b6be0dd8d7b36ef
-
SHA256
51831fecc07d86d5617156b798c4bdc72bc49c03af49987616ff7fd216cec1c5
-
SHA512
b04afafa920cad8bdb131283072c9be599b4c025f47c36d6f690cebd2ce496aded38cf219c885c94f4ea08f52a72f99ebf6bcebfe4def5f37deb946d7e88aaa3
-
SSDEEP
12288:XW9B+VzTNjYGgpK/vnRsmH5Ckt73qfKrrzD89f24pWYbCXGah2JoHq1MGJlyw9ht:XW9B4TNjx+mZCkt76f/24pN+XNqNG6hF
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 51831fecc07d86d5617156b798c4bdc72bc49c03af49987616ff7fd216cec1c5.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2740 51831fecc07d86d5617156b798c4bdc72bc49c03af49987616ff7fd216cec1c5.exe