Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
21-11-2024 11:19
General
-
Target
881b6e5422d2ffd4737f7c86b35d4515b2935ade508643e0b8a0bbf65fb58db7.exe
-
Size
258KB
-
MD5
d48e60a39e9b3ff670db0076b945b522
-
SHA1
cbf50709eaff37936988b6edfcce1b0473e00f85
-
SHA256
881b6e5422d2ffd4737f7c86b35d4515b2935ade508643e0b8a0bbf65fb58db7
-
SHA512
a57e366535a83964a4e244ea69679d69ad6296b44c33a5cae51ffce09c114a40efcd657899aed4fb0ce978174a73bfac5213d246afd590b3f4978d02ef4a1d13
-
SSDEEP
3072:YHSAQy3H57Vh3E8cZdrLQEhZVUnpAT+qq+Fpfb2vz+DVCN7cbp5fRrcZ:YLQyX55h3BcZdr0sZ8+rgyfFo
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 6 IoCs
-
Suspicious behavior: MapViewOfSection 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\881b6e5422d2ffd4737f7c86b35d4515b2935ade508643e0b8a0bbf65fb58db7.exe"C:\Users\Admin\AppData\Local\Temp\881b6e5422d2ffd4737f7c86b35d4515b2935ade508643e0b8a0bbf65fb58db7.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: MapViewOfSection
- Suspicious use of AdjustPrivilegeToken
-
\Windows\System32\lsass.exe1⤵