Analysis
-
max time kernel
13s -
max time network
147s -
platform
windows10_x64 -
resource
win10v20201028 -
submitted
17-11-2020 15:20
Static task
static1
Behavioral task
behavioral1
Sample
aa02188daab3faaaba74081d7e9a4986.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
aa02188daab3faaaba74081d7e9a4986.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
aa02188daab3faaaba74081d7e9a4986.exe
-
Size
184KB
-
MD5
f59deb960309edee8ff6eee523f52006
-
SHA1
933ab0fec556e4cd02d7971ec7fc0a3f1c000b8a
-
SHA256
d7754476cbf09c62d377387cc0cea85bdad171cec82388f4ab2e2accf1d1f876
-
SHA512
ff5ff71b5e47800429e77df9a491300bc282f4fec0133151e72611969257eb553e2c5441c7faec8b22a67d7c645ea5ca4c87f73c73b236cca8bf910cc6526f5d
Score
1/10
Malware Config
Signatures
-
Checks SCSI registry key(s) 3 TTPs 8 IoCs
SCSI information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_&Prod_HeartDisk\4&37ce57ba&0&000000\Service aa02188daab3faaaba74081d7e9a4986.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_&Prod_HeartDisk\4&37ce57ba&0&000000\UpperFilters aa02188daab3faaaba74081d7e9a4986.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_&Prod_HeartDisk\4&37ce57ba&0&000000\LowerFilters aa02188daab3faaaba74081d7e9a4986.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Sanu&Prod_Sanu_DVD-ROM\4&37ce57ba&0&010000 aa02188daab3faaaba74081d7e9a4986.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Sanu&Prod_Sanu_DVD-ROM\4&37ce57ba&0&010000\Service aa02188daab3faaaba74081d7e9a4986.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Sanu&Prod_Sanu_DVD-ROM\4&37ce57ba&0&010000\UpperFilters aa02188daab3faaaba74081d7e9a4986.exe Key value queried \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Sanu&Prod_Sanu_DVD-ROM\4&37ce57ba&0&010000\LowerFilters aa02188daab3faaaba74081d7e9a4986.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_&Prod_HeartDisk\4&37ce57ba&0&000000 aa02188daab3faaaba74081d7e9a4986.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe Token: SeLoadDriverPrivilege 1056 aa02188daab3faaaba74081d7e9a4986.exe