Analysis
-
max time kernel
133s -
max time network
46s -
platform
windows7_x64 -
resource
win7-20220414-en -
submitted
24-05-2022 14:41
Behavioral task
behavioral1
Sample
3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Resource
win7-20220414-en
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Resource
win10v2004-20220414-en
0 signatures
0 seconds
General
-
Target
3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
-
Size
43KB
-
MD5
7dd6dc0c5fcaa3fb65cf2d1e3314e2b0
-
SHA1
8007bf5fcfd128fa2a2a91ca50d4c2f45c99033e
-
SHA256
3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507
-
SHA512
3de33c1b989260bf7a71e15e22274f61cd66abf68c0b75b1fd7dbf0263bddd412998a1baed2cb3f36e097417fce75799efcaf1827966cacafd3141629a950294
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
Processes:
3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exepid process 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe -
Suspicious use of AdjustPrivilegeToken 13 IoCs
Processes:
3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exedescription pid process Token: SeDebugPrivilege 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: 33 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: SeIncBasePriorityPrivilege 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: 33 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: SeIncBasePriorityPrivilege 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: 33 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: SeIncBasePriorityPrivilege 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: 33 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: SeIncBasePriorityPrivilege 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: 33 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: SeIncBasePriorityPrivilege 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: 33 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe Token: SeIncBasePriorityPrivilege 1632 3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe"C:\Users\Admin\AppData\Local\Temp\3060141dbce4329347881c60b58ce2a3dc1fc83dc075905640ecfb4256298507.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken