Analysis
-
max time kernel
402s -
max time network
441s -
platform
windows10-2004_x64 -
resource
win10v2004-20240910-en -
resource tags
-
submitted
12-09-2024 07:14
General
-
Target
resources/app.asar.unpacked/daemon/start_full_node.exe
-
Size
11.2MB
-
MD5
275e7df82505e42cf2274cd2e9ed68c9
-
SHA1
6f5810d0d2bd75b7d019af92b7d42784de137590
-
SHA256
6a97a260153b4028bfbfceaa90afa07f4ad3099b5c69bf1c161083d819cb28ed
-
SHA512
08fd284ff956223c0f10339cd16909eddd277f80e1ffcbe23e3c3d905994dcf60c85627d4ff0c834a7ef2af3c09b1846deb4d027a81aa6de1922ac0f35b1a15d
-
SSDEEP
196608:gXV1+XomR8upvqAuwo6bVF2Ap6W7IArZXK38lciyNh7fFPkjkDkJr:2MXqu8iXbVF2c6W751638Q5ZIE+r
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_full_node.exe"C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_full_node.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"2⤵
-