Analysis
-
max time kernel
137s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
10-08-2024 06:30
General
-
Target
noinstall/DotNetDataCollector64.exe
-
Size
140KB
-
MD5
8d59b498eb8311edd5c29f3930f4789b
-
SHA1
afd7a0e7e81375d7f299f4c6a56aa55b54db642e
-
SHA256
d26ea9b41f172c146633d2e4fac8c50a4b0c6bb343a37cf5fb3c17598bb49971
-
SHA512
c64214d99d8da1a906a94f851f452ba7b6606ab26f6f116157d27d4f1cc97e5844ceb0d1a2f3378f39642ac3751150725d46fb068cba23baae6c0ffafa8a47f4
-
SSDEEP
3072:yaiK+WTbu+lRKrDqfZtSMwcEUX+U5Xgu3S7xDkzozO27:xiKlTS+lUefbnPX1XF3CD+iP7
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\noinstall\DotNetDataCollector64.exe"C:\Users\Admin\AppData\Local\Temp\noinstall\DotNetDataCollector64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken