Analysis
-
max time kernel
118s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
22-11-2024 07:30
Static task
static1
Behavioral task
behavioral1
Sample
34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449.exe
Resource
win7-20241010-en
windows7-x64
2 signatures
120 seconds
General
-
Target
34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449.exe
-
Size
171KB
-
MD5
3358e0007df17d15f1fc253b68f238f8
-
SHA1
b5d79461ef215f06c2e84ed37ad125ae733220bd
-
SHA256
34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449
-
SHA512
14b8ad889d6aac08fea45997c53ddbceca6e39039c0a2640e2de424d51c38436af9a90a8c6dae7f3f6e05aaf91e6d9bff33dcc4b72838f66f0616215ea42958b
-
SSDEEP
3072:BGolBCNQw7F/drLh7hSWqqwkGzhtbAhiLgYS:MoSNQwR/J1phwXzDEiA
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449.exepid Process 1728 34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449.exedescription pid Process Token: SeDebugPrivilege 1728 34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449.exe"C:\Users\Admin\AppData\Local\Temp\34ea7434bf039e7502960502da49c28e9ca2283efae0e7ea661391e0b295e449.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1728