Analysis
- max time kernel
150s - max time network
150s - platform
windows10_x64 - resource
win10 - submitted
23/09/2020, 08:48
Static task
static1
Behavioral task
behavioral1
Sample
GmAYdhhJ.exe
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
GmAYdhhJ.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
- Target GmAYdhhJ.exe
- Size 32KB
- Sample200923-81e8jkccsa
- SHA256 3dc8c608af3e6e6aec80dbed90a2565121bf097ae71071ce1d1fc4ecc3d8f39a
- MD5 d3df8db81fd07b85a84b8dd18165f7f6
- SHA1 605a5597cf99e4e090c2d140bcecac3c305bd69f
- SHA512 95d2e4b96f99727466df964785da93488ff67cf208069cdca73a7dd9cb8214656c6aaac768aa4d3dc168c45a51175fc4a9a0860dcc6fbdc6a83e48de5a4b94a0
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe Token: 33 3828 GmAYdhhJ.exe Token: SeIncBasePriorityPrivilege 3828 GmAYdhhJ.exe