Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10_x64 -
resource
win10-en-20211208 -
submitted
12-01-2022 01:03
Behavioral task
behavioral1
Sample
Client.exe
Resource
win7-en-20211208
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Client.exe
Resource
win10-en-20211208
windows10_x64
0 signatures
0 seconds
General
-
Target
Client.exe
-
Size
32KB
-
MD5
717c8e0adaed98341e0b8d2c26da1803
-
SHA1
2ef51053667af029a1eefa8f35b92e9b8ccb2871
-
SHA256
08dd5907b25f93be9300016865aae429318e00969a1b875bfabe2018403ebd40
-
SHA512
e3bd14270def68f77fa1abdf7bfe6213586bd83839ab023a9bf3493df79d9c0d9016dc1288b330483458ee37a9b0dad9551f49736a976136a54df1e6e4a9c742
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 35 IoCs
Processes:
Client.exedescription pid process Token: SeDebugPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe Token: 33 3664 Client.exe Token: SeIncBasePriorityPrivilege 3664 Client.exe