Analysis
- max time kernel
150s - max time network
142s - platform
windows10_x64 - resource
win10v20201028 - submitted
09/11/2020, 20:32
Static task
static1
Behavioral task
behavioral1
Sample
baxter.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
baxter.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
- Target baxter.exe
- Size 32KB
- Sample201109-z9pc2xtepx
- SHA256 6f4fd6b4e98cc1e14ea563c8274d4f281ca6f7b5c77b74ffe4225ec14ec78e52
- MD5 b8c30c8002a5834a286540c984adf1c8
- SHA1 e2cfc74f0c1bad5691abecc4bc3c2b283ed2a474
- SHA512 d5fc6527cdadcb7cabc1e291382877baafd5cfe4cd1f5f57de70c4d06a4ed1a76563befb7788cc3e0a86fe9661258bf2f07a4e84c771c4606f289d95c0f5cf84
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe Token: 33 3988 baxter.exe Token: SeIncBasePriorityPrivilege 3988 baxter.exe