Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system -
submitted
22/07/2024, 13:29
Static task
static1
Behavioral task
behavioral1
Sample
DesktopInfo64.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
DesktopInfo64.exe
Resource
win11-20240709-en
windows11-21h2-x64
2 signatures
150 seconds
General
-
Target
DesktopInfo64.exe
-
Size
827KB
-
MD5
713d31e641da1b50a559c19dfd8404f1
-
SHA1
74039e61f2e0bff41bd91c969fefb0d9feae09f6
-
SHA256
c6ab6ad54e8ba39ebfbd4081cf67fcc5f478cc9218dae96aa61d06a893826ec2
-
SHA512
45fdee8c03fa6e78afcf421c204b95535aac27dd2a7f476219f00be8205b819b2535e4e758a6517cf02576cd1c61924b6ba46dcaf3abcdb377cb8c6dc9ff3231
-
SSDEEP
24576:9rvBRqHs/qTbAlvrNGpCYxYQ1o1yN3QwqQUMQwQbbbhbbbmbbbabbbN8:xBRGsqTbAlvrNGpCYxYiN37p
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe 844 DesktopInfo64.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 844 DesktopInfo64.exe