Analysis
-
max time kernel
422s -
max time network
443s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12/09/2024, 07:14
General
-
Target
resources/app.asar.unpacked/daemon/start_introducer.exe
-
Size
11.2MB
-
MD5
668887ccb3345c629bafd7b457d0a97d
-
SHA1
d5bceef9ac985439f858151590a9c1c834479ae5
-
SHA256
f90cbb160798b9598170087d2e651e4831de4a30d47dce003fc246d8c877ca0c
-
SHA512
3c45d1c310ffd9633597b0dc6d69f282a3ddf3f7ee90bf59ea820335b69ee3217768b92718e7a80eec5dc0ec1c04aca1ff37c848cba3ce52944d26e2c96bbf9d
-
SSDEEP
196608:rh61+XomR8upvqAuwo6bVF2Ap6W7IArZXK38lciyNh7fFPkjkDkJ+:oMXqu8iXbVF2c6W751638Q5ZIE++
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_introducer.exe"C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_introducer.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"2⤵
-