Analysis
-
max time kernel
155s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
01-07-2022 05:13
Static task
static1
Behavioral task
behavioral1
Sample
3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
General
-
Target
3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe
-
Size
471KB
-
MD5
2b4d0c3165ea645df892c2e8f44c9dc4
-
SHA1
bcbf83abdcda929aa77ba77b452392088507af40
-
SHA256
3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188
-
SHA512
df74155f9cd22777a6d5bdedf0eb38343979d91384a296ce91f2406ce132d442ec0eb5673ba1ff98b0afcb0658ac3f9e79ad87349ac57ca9220e7492c9e87b15
Malware Config
Signatures
-
Drops startup file 2 IoCs
Processes:
3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exedescription ioc process File created C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fcd69adb6d459e7a707cc668d8ce6d52.exe 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe File opened for modification C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\fcd69adb6d459e7a707cc668d8ce6d52.exe 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe -
Suspicious use of AdjustPrivilegeToken 35 IoCs
Processes:
3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exedescription pid process Token: SeDebugPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: 33 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe Token: SeIncBasePriorityPrivilege 876 3ec7eb6c6a3e0e09922d533f1c0ed3feea85152f3a8986c8e197f8d1c5734188.exe