Analysis
-
max time kernel
150s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
03/09/2022, 07:29
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20220812-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20220812-en
1 signatures
150 seconds
General
-
Target
tmp.exe
-
Size
32KB
-
MD5
b5feacdcdd478f8d833218d30d130dab
-
SHA1
586c8dd1ec016850ffe2630b81af4f7c0f716a76
-
SHA256
9dd09a60c4df0f14a01cf7a3d6e01739ce01589a85996659c802d9177b736cf9
-
SHA512
9a54449a0fe043e7f752e8364a69a39bef8526db686414a4d9f589546f51f611c54d33925947b797743d9ac5127d7fef19d70ba3e48b55ec94b1af5ee4198867
-
SSDEEP
384:W0bUe5XB4e0XMO7JSjgkMRWTPtTUFQqz9+w3ObbH:3T9Buz1SjeqGkbH
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe Token: 33 4968 tmp.exe Token: SeIncBasePriorityPrivilege 4968 tmp.exe