Analysis
-
max time kernel
58s -
max time network
41s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
20/10/2022, 09:10
Static task
static1
Behavioral task
behavioral1
Sample
1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe
Resource
win10v2004-20220812-en
General
-
Target
1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe
-
Size
624KB
-
MD5
703553d632a605c4f6039e7c53f13b80
-
SHA1
472edb3483b0203cbd18fcb6163f94944b8517b8
-
SHA256
1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24
-
SHA512
b5c54261725690bf22a8bb91424e66985a9349e82b432329817c25729305cc8a860151f33ba11566ba35e35fefc0d796625fc82d7f41d95759014ea5dbc918fb
-
SSDEEP
12288:lwW6F3xEKwtzTbhgCbgMhG/c3VuVBuZVZL7K:6NF3xWzTOCbgMA/FoO
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 9 IoCs
description pid Process Token: SeDebugPrivilege 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe Token: 33 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe Token: SeIncBasePriorityPrivilege 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe Token: 33 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe Token: SeIncBasePriorityPrivilege 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe Token: 33 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe Token: SeIncBasePriorityPrivilege 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe Token: 33 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe Token: SeIncBasePriorityPrivilege 1928 1d6a56b4d692dd81017d9857071693bd01993a9cd2d31fd495a68891a549df24.exe