Analysis
-
max time kernel
426s -
max time network
448s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12/09/2024, 07:14
General
-
Target
resources/app.asar.unpacked/daemon/start_timelord.exe
-
Size
11.2MB
-
MD5
af012119bc6555e592f719de37ef6684
-
SHA1
f930d390bc49142b965696bfe8a0d32418a53365
-
SHA256
4cee0fccbae1709ce9e49e13bbcb5e4010e2cabadff5b300b4dd4318fc69d8b7
-
SHA512
b735d11ef448d69afa8bcdb9aec45d75d1128c44af216716aaf9df553c9842e6cb9051182c684f18daea2584e02f1c113747c371200637723e6f727c30c93bc4
-
SSDEEP
196608:uoL1+XomR8upvqAuwo6bVF2Ap6W7IArZXK38lciyNh7fFPkjkDkJY:tMXqu8iXbVF2c6W751638Q5ZIE+Y
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_timelord.exe"C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_timelord.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"2⤵
-