Analysis
-
max time kernel
122s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
24-09-2024 01:14
Static task
static1
Behavioral task
behavioral1
Sample
397afb74746b2fe01abc63789412b38f44ceb234a278a04b85b2bb5b4e64cc8c.msc
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
397afb74746b2fe01abc63789412b38f44ceb234a278a04b85b2bb5b4e64cc8c.msc
Resource
win10v2004-20240802-en
General
-
Target
397afb74746b2fe01abc63789412b38f44ceb234a278a04b85b2bb5b4e64cc8c.msc
-
Size
85KB
-
MD5
026a6ed068b12ea1447ca20d4f82452f
-
SHA1
9bfd0e7ec77143943e56da46d6baee7d74cc8757
-
SHA256
397afb74746b2fe01abc63789412b38f44ceb234a278a04b85b2bb5b4e64cc8c
-
SHA512
4735e86f6493ee67292a4eaa375c0e016987128643e3d2bb8b19cb66fb0b79e61a93ced9554bf7fb4a934bd8697e2529bc34349aad81954e2ab4e0e00b2de940
-
SSDEEP
192:f0lAswM0m+kz8J0fD1dasPPPPWmxWqWPPPPP5/PPPB9Ef/Hk95vPPPPPPPNdJt/U:O6JJ0BdaxmGnE3Ert2jWe
Malware Config
Signatures
-
description ioc Process Key created \REGISTRY\USER\S-1-5-21-2872745919-2748461613-2989606286-1000\Software\Microsoft\Internet Explorer\Main mmc.exe -
Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: 33 1352 mmc.exe Token: SeIncBasePriorityPrivilege 1352 mmc.exe Token: 33 1352 mmc.exe Token: SeIncBasePriorityPrivilege 1352 mmc.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 1352 mmc.exe 1352 mmc.exe 1352 mmc.exe 1352 mmc.exe