Analysis
- max time kernel
148s - max time network
151s - platform
windows10_x64 - resource
win10 - submitted
14/10/2020, 14:18
Static task
static1
Behavioral task
behavioral1
Sample
W1rh45g5.exe
Resource
win7v200722
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
W1rh45g5.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
- Target W1rh45g5.exe
- Size 78KB
- Sample201014-qwtjtfzt8a
- SHA256 b4d493227e334e826fbb6dcbca9110478d6f23596b1c0d141b38e97d7d8ade33
- MD5 474f92f591dda1b1a9a74e7b7f339894
- SHA1 1f433446c3a40fa15babcc6d629a8924b55299ad
- SHA512 70d9174c1f9d78be04ebe9598f1f1c7344910c5750636dfe96e2f093219abd195b7ef8af1717d4a1dcb5991352d303e77fbb12c17bfe3a36631e2b503f6b72a9
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe Token: 33 3588 W1rh45g5.exe Token: SeIncBasePriorityPrivilege 3588 W1rh45g5.exe