Analysis
-
max time kernel
409s -
max time network
489s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-09-2024 07:14
General
-
Target
resources/app.asar.unpacked/daemon/start_harvester.exe
-
Size
11.2MB
-
MD5
7efd505cdc092aba3806fc329d063a68
-
SHA1
bb3c7c5034770969eebec1e4fd696b3f69c638b8
-
SHA256
561bf42ba81fe2a16f53c2d20d2323c2103b35be7f3680bc09233fe342a31562
-
SHA512
74637aa91c53280f3b43a00b6833f69b9ff053206fd6e89646a3f1947eb39a7de4899fc802299ea16e2289d37bf509f871b25ae1ca22e3cef12d515209de68e0
-
SSDEEP
196608:E+b1+XomR8upvqAuwo6bVF2Ap6W7IArZXK38lciyNh7fFPkjkDkJT:FMXqu8iXbVF2c6W751638Q5ZIE+T
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_harvester.exe"C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_harvester.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"2⤵
-