Analysis
- max time kernel
153s - max time network
160s - platform
windows10_x64 - resource
win10v20210408 - submitted
02/09/2021, 15:57
Static task
static1
Behavioral task
behavioral1
Sample
03_extracted.exe
Resource
win7-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
03_extracted.exe
Resource
win10v20210408
windows10_x64
0 signatures
0 seconds
General
- Target 03_extracted.exe
- Size 32KB
- Sample210902-tdxpjadgbj
- SHA256 7dceeafd535e43788a701ef74adb6ecdc57cd56533ff3117ddc10b15569e0f1e
- MD5 3b519420aaba66e7997f5edd3eebba34
- SHA1 25638519441450f6b62366c0dc88f68229bfdb47
- SHA512 e0bf3bcb17b837013fa811404b816875ae0545ee23d9dc9dbb3d61cb1f440c25c61f082fd77697b8b703c258d71372d619037968e5c8f5ae841cecc3fd20e717
- MD5 SHA1 SHA512
Score
10/10
Malware Config
Signatures
- suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
suricata: ET MALWARE Generic njRAT/Bladabindi CnC Activity (ll)
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe Token: 33 3728 03_extracted.exe Token: SeIncBasePriorityPrivilege 3728 03_extracted.exe