Analysis
- max time kernel
145s - max time network
141s - platform
windows10_x64 - resource
win10v20201028 - submitted
12/11/2020, 19:52
Static task
static1
Behavioral task
behavioral1
Sample
7257480686.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
7257480686.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
- Target 7257480686.exe
- Size 32KB
- Sample201112-1qkbkvwp96
- SHA256 5730cdbd8b40bd9dbfc8e26d55434446b4793888e09822c457db6976d10ded52
- MD5 94e9678e217722aeca4183261dbb0833
- SHA1 37880042fafe19243350d04e68eaa3678e51b2d2
- SHA512 db9aadc25b910afca61c239dd2724af3d7504bb68dfd2cdecee467dc254f43d252ed47d86371693c589d4af985ff7092571c61b9b7baae1a934a3b73782885df
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe Token: 33 580 7257480686.exe Token: SeIncBasePriorityPrivilege 580 7257480686.exe