Analysis
-
max time kernel
93s -
max time network
98s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
07-12-2024 19:56
General
-
Target
x64/Release/quantum.dev.exe
-
Size
645KB
-
MD5
a9eb5298409209033cf707c0dfbaa60f
-
SHA1
bf5c0162018ea54fa188e9ac3f678589db4c18f3
-
SHA256
ac09ad360e3876c15982161015c319c31251f087324d6bd77921ba359d4e3d7b
-
SHA512
b53d9072411dbfa92cb1a87bcf943ea7e00271d353f5d0d0ebf2088dedc6895ed02fe8c6ba19ca1ba60c139d5ca1ff36a6bc98d1f4ff8e11859b32ce3daff3ec
-
SSDEEP
12288:hoJOLUTJcMfM2kO9ssSxJY+IQREyIoXQsXIyHoF9iS3nF1sUZx1sUCN:hoJOLUTJcMfM2kO9ssIG+GKYMoFx3nFw
Score
8/10
Malware Config
Signatures
-
Sets service image path in registry 2 TTPs 1 IoCs
-
Suspicious behavior: LoadsDriver 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\x64\Release\quantum.dev.exe"C:\Users\Admin\AppData\Local\Temp\x64\Release\quantum.dev.exe"1⤵
- Sets service image path in registry
- Suspicious behavior: LoadsDriver
- Suspicious use of AdjustPrivilegeToken