Analysis
-
max time kernel
13s -
max time network
23s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
19/11/2024, 10:58
General
-
Target
RivieraBootstrapper/RivieraBootstrapperV2.9.0.exe
-
Size
135KB
-
MD5
13b9cc6fa2a643cdcdac4942858bb993
-
SHA1
66070cd6645ce226daa485fce7e90410130b2c2e
-
SHA256
f8eea0b3ef2cd06676b33db67b279de64860824c802591519a651f4132f6bc19
-
SHA512
31ac095c4187ab7af2ff47dec789fed6d7d71001719e8c1f99d2022accb79438c1c3028bc9ee9d4f6343f8b4fdd90ead5b0e9e2ae6158c97d4482fde94d52d0c
-
SSDEEP
3072:mhK4Uay3XrQ8habqgp9pC9Z6p5uf3C6k0xuZ04ntfxZhBuL:mhK4XycqgpfCup5sVxuZ04hhA
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RivieraBootstrapper\RivieraBootstrapperV2.9.0.exe"C:\Users\Admin\AppData\Local\Temp\RivieraBootstrapper\RivieraBootstrapperV2.9.0.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken