Analysis
-
max time kernel
142s -
max time network
149s -
platform
windows7_x64 -
resource
win7v20201028 -
submitted
04-03-2021 18:19
Static task
static1
Behavioral task
behavioral1
Sample
49cc3c09_extracted.exe
Resource
win7v20201028
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
49cc3c09_extracted.exe
Resource
win10v20201028
windows10_x64
0 signatures
0 seconds
General
-
Target
49cc3c09_extracted.exe
-
Size
127KB
-
MD5
5523e663cf4697857df93a9bd262f12a
-
SHA1
e7214f499dffac1125ad423de465b4d5289954b3
-
SHA256
23225f2d86003f21a827b2e08b4935dd203563013963f48ccc4ce6d026a5b06c
-
SHA512
ba3cca366526796b957b606aa97d4d954c7f2ea6739e7b4b8c642a0df160f712633ba0b358c586999ec5c935d453f6dc54fe468f956e581b5dc14e1cd8d3bc61
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
49cc3c09_extracted.exedescription pid process Token: SeDebugPrivilege 776 49cc3c09_extracted.exe