Resubmissions
19-09-2024 07:29
240919-jbcapsxeqk 719-09-2024 07:27
240919-jaa19axcje 719-09-2024 07:21
240919-h66x5axanb 719-09-2024 07:04
240919-hwcxaswenh 719-09-2024 07:04
240919-hv496awend 319-09-2024 07:00
240919-hs4kvawfqr 3Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-09-2024 07:00
General
-
Target
internationalPaymentDetails/internationalPaymentDetails .exe
-
Size
24KB
-
MD5
dbf001709c85cb1040c86b56dd29e02a
-
SHA1
8d1c67f18756fc93af61c45a7ccdd88554590c4f
-
SHA256
5c5ce4bf348150622adb9f71ed42879c4a5ebf99c94c2be940141d28f2c8275d
-
SHA512
7e59d49be1d670a3b74af5a4340c7d3f041f3a690fbf9d3f35ee9111ae5e6dc56b2486dd8e044f2c88c7d439a35821fa75164e74c7d7456c3e70b78420dc409e
-
SSDEEP
384:ek4cgxl1oqO3ZKFy3N5AOtFP27xWkVbgWUlIx4c1WuoNDwXw0FP27NBY3Yuv+NA:ySq9FCN5vKxnVbgvqxN1z6chK/Y/+NA
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\internationalPaymentDetails\internationalPaymentDetails .exe"C:\Users\Admin\AppData\Local\Temp\internationalPaymentDetails\internationalPaymentDetails .exe"1⤵
- Suspicious use of AdjustPrivilegeToken