Analysis
-
max time kernel
117s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240705-en -
resource tags
arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system -
submitted
01/08/2024, 22:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
177ad7123bad01c5525dce8098cfa830N.exe
Resource
win7-20240705-en
2 signatures
120 seconds
Behavioral task
behavioral2
Sample
177ad7123bad01c5525dce8098cfa830N.exe
Resource
win10v2004-20240730-en
1 signatures
120 seconds
General
-
Target
177ad7123bad01c5525dce8098cfa830N.exe
-
Size
1.4MB
-
MD5
177ad7123bad01c5525dce8098cfa830
-
SHA1
6ef10f35034303b87dd6b67bdd9178fc4135b9b8
-
SHA256
3dcb014866f1250202790c10d77046f5231e3c1deacca84e8d26ecc332ef82e0
-
SHA512
c9883dbe229a2f9f69a15506a1034ec7cb6ad3234ffde847115a2436af4fcaf54dcd0221017ff82a04064c58150c74eb6f227a83b0d147357d7ed0e7029b6229
-
SSDEEP
12288:VIfOp/SInr8vv2BDeT+bVYHTb3FRk/rMNxaXqqlPbJKTGv5DYFXOBnXREHa:efQ/i328ab4F+rM/aXq6bJfBUam6
Score
5/10
Malware Config
Signatures
-
Drops file in System32 directory 1 IoCs
description ioc Process File opened for modification C:\Windows\System32\alg.exe 177ad7123bad01c5525dce8098cfa830N.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2704 177ad7123bad01c5525dce8098cfa830N.exe