Analysis
-
max time kernel
114s -
max time network
161s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
04/09/2024, 18:27
General
-
Target
ULTIMATE KASU/ Install DEBLOATED GPU drivers/NVCleanstall_1.16.0.exe
-
Size
3.8MB
-
MD5
41421866b825dbdcc5f29a0bbd484362
-
SHA1
f7637ef22c82a108ab4668baca40e4f03eb49a5c
-
SHA256
efecb17d9d73082bf28a6e7c6bb87a81c65a59b2d4d14251678da3cffa6a12a1
-
SHA512
72ba988029e87661ad2adf68f79d054febe499d2fb3220518df7372b953d761acf88470f1620f7660eba963c42bc9327ad070b0c386282f6654f80b0ed50599d
-
SSDEEP
49152:5FEVBwhGaOQ52kLkEfg3fBDW4mJVUEtc3W4TDyJw7so4c7ckyRKPk9gZPeR0XjBO:5aPJaOQ5UB6Bxu9TDyJw4cXyIuaWR0rs
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
Processes
-
C:\Users\Admin\AppData\Local\Temp\ULTIMATE KASU\ Install DEBLOATED GPU drivers\NVCleanstall_1.16.0.exe"C:\Users\Admin\AppData\Local\Temp\ULTIMATE KASU\ Install DEBLOATED GPU drivers\NVCleanstall_1.16.0.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
-
Filesize
3.8MB
-
Filesize
5.8MB
-
Filesize
136KB
-
Filesize
4.8MB
-
Filesize
24KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
32KB
-
Filesize
224KB
-
Filesize
56KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
8KB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB
-
Filesize
10.8MB