Analysis
-
max time kernel
398s -
max time network
454s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-09-2024 07:14
General
-
Target
resources/app.asar.unpacked/daemon/start_wallet.exe
-
Size
11.2MB
-
MD5
1874df2df5f6feed1a795546d1c343d8
-
SHA1
54c5301ac9d2349524d798fcb1f9469485fa5dfd
-
SHA256
6de4f105e4430a6550410049a4d440bb7663cff820927eaffbf6de9196036e26
-
SHA512
48950f129525b1d36805cc6f146daaceb6376c8b23420b25f5bc6861fc2f7a3c2e0dcf419d6fff80523c6b9c446dd792f9a56d02cab769b01e9abfe10628569a
-
SSDEEP
196608:/Ff1+XomR8upvqAuwo6bVF2Ap6W7IArZXK38lciyNh7fFPkjkDkJ5:NMXqu8iXbVF2c6W751638Q5ZIE+5
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_wallet.exe"C:\Users\Admin\AppData\Local\Temp\resources\app.asar.unpacked\daemon\start_wallet.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /c "ver"2⤵
-