Analysis
-
max time kernel
122s -
max time network
135s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
15-11-2024 09:19
Static task
static1
Behavioral task
behavioral1
Sample
745e68eef52d2584274e182a7825b4e181d542bda918cd5e2264cad8e8ebc5bc.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
745e68eef52d2584274e182a7825b4e181d542bda918cd5e2264cad8e8ebc5bc.exe
Resource
win10v2004-20241007-en
General
-
Target
745e68eef52d2584274e182a7825b4e181d542bda918cd5e2264cad8e8ebc5bc.exe
-
Size
88.3MB
-
MD5
a48fdb35dbd4c841377c7a6b7f854e01
-
SHA1
8632d7f9b56081501bcba13d378250c98400e7a0
-
SHA256
745e68eef52d2584274e182a7825b4e181d542bda918cd5e2264cad8e8ebc5bc
-
SHA512
b4bcae323e4d49fbeec6790a4d3ff73dba1c3f3ec26c318abde0dd989087f38f370f59e87d0f3cde8a024d7f315f9f681880d2ebfe94008ed19f82ff59cf61f5
-
SSDEEP
6144:Ki9PBXe1j1agJRe6qTF38D6t6HTD1Nmhro:KqBmagJRe6qc6t6zwo
Malware Config
Signatures
-
Downloads MZ/PE file
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
745e68eef52d2584274e182a7825b4e181d542bda918cd5e2264cad8e8ebc5bc.exedescription pid Process Token: SeDebugPrivilege 2232 745e68eef52d2584274e182a7825b4e181d542bda918cd5e2264cad8e8ebc5bc.exe