Analysis
-
max time kernel
18s -
max time network
26s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
15-09-2024 04:29
General
-
Target
youtube-view-bot-main.zip
-
Size
17.3MB
-
MD5
6e187bc36a3a9ffbb1beebc57e369cc3
-
SHA1
dcaf71c35784eaf3872a2eb4a31f17a13fe03af5
-
SHA256
84d2c1e7590c181cd6d15dfbd875bcaeea189abfdb782728c649ea0bdce0f914
-
SHA512
268a9102bd4a1df7e15f966e193e08a1b4f69ef1702b60cdd529cf5eee53178a475abba5fd05bca325709d430b1e4ea1758c98d70f500599fa0d5bbbba56ea68
-
SSDEEP
393216:zcLB7ReU5Xhb7JZqN+QqYg0iC0DtKuln1OvCWTinsJcNonw6IEOuGjhAI:zcLBUqb1Z8+QR0gulKWsJcKwvx7hz
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Windows\Explorer.exeC:\Windows\Explorer.exe /idlist,,C:\Users\Admin\AppData\Local\Temp\youtube-view-bot-main.zip1⤵
-
C:\Windows\explorer.exe"C:\Windows\explorer.exe"1⤵
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x5cc1⤵
- Suspicious use of AdjustPrivilegeToken