Analysis
-
max time kernel
134s -
max time network
150s -
platform
windows10-1703_x64 -
resource
win10-20240611-en -
resource tags
arch:x64arch:x86image:win10-20240611-enlocale:en-usos:windows10-1703-x64system -
submitted
27/09/2024, 09:44
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Client.exe
Resource
win10-20240611-en
2 signatures
150 seconds
General
-
Target
Client.exe
-
Size
132KB
-
MD5
bc0b16415704544938819c520244deae
-
SHA1
483505a6b95f43d48bcd654505b33a33d8b3d428
-
SHA256
163f484f3ce091d07dafa977cdff2a1c2a2014bd9bbf42b8ff5af4a6223e3e63
-
SHA512
53b2c5872001b273ee7c3f45535fc5adfe77ccdaa98ded48138ba2d32634ac613edee856e6a5d9852c7f19b4cc910aa41a9196c990c8f1336adab204782f5ddd
-
SSDEEP
3072:HmOW6ECafbX3ou2osufgQrbmyUXpYsxVypDPcv+u0EHF:GIECobnoa5HnCpwAv+u0+
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 10 pastebin.com 9 pastebin.com -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1628 Client.exe