Analysis
-
max time kernel
95s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
25-08-2024 23:54
General
-
Target
SIDCHG64.exe
-
Size
1.6MB
-
MD5
0985a28d3bd60aac4320e4bb8418623b
-
SHA1
ccf81ecdce7939fd4cc9d7b40877ced3987b95c0
-
SHA256
d2c3d560a6ad7e714992483ce7044999ed7e56990076a019e530eaa399f5c6cf
-
SHA512
7d251b6c9353b4b68b08a29d3301fb330127371a633b43e2c345b70f6440fdaa7b7666889f80efca05a8376616b0a7afdac7e4b24bbf582b35b555b0015e05f1
-
SSDEEP
24576:PiOv0tuHBEwdjEaZJVamphU9hDe/1Cdc0LQgTjCQyQwodrtDTHf66bmIHYV6O:Pi8VxdjEabpGD8bE5yQwodrtDT/lK6O
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SIDCHG64.exe"C:\Users\Admin\AppData\Local\Temp\SIDCHG64.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken