Analysis
- max time kernel
140s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
19/10/2024, 16:07
Static task
static1
Behavioral task
behavioral1
Sample
3.exe
Resource
win7-20240903-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
3.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
General
- Target 3.exe
- Size 1.5MB
- Sample241019-tkrrvswgpm
- SHA256 b39e4ddf7c57a6c85196e27ddf255811bd3bb3a73363227e455059008468d4b8
- MD5 eb2687ee1d80d507b550f9c02523db06
- SHA1 5b80a6c46dd5cd85001486ea4d09ebf8c674f802
- SHA512 1b96045d8537e989e94a66fa578a3ff42b36aa3643d34b2f791ed3b0f4e5849faac2856640eab3fdb38746b827a9450f583a3e311781516564ba615a293668d5
- SSDEEP 24576:cioa9QayPNalHGq8e27bb0hfgmvYXbNqaDQeXX/X3qwiRfDdzijgnLpv:cippYNQHGq87b7mv4Es/3qwiVDdz/h
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 5 IoCs
pid Process 2404 3.exe 2404 3.exe 2404 3.exe 2404 3.exe 2404 3.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeBackupPrivilege 2404 3.exe Token: SeRestorePrivilege 2404 3.exe