Analysis
-
max time kernel
8s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
22-10-2022 05:36
Static task
static1
Behavioral task
behavioral1
Sample
5ea4a54b8778bef69dcfd4ea080e3fc7077a82797cdaa8ff60ac2214d3485248.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
5ea4a54b8778bef69dcfd4ea080e3fc7077a82797cdaa8ff60ac2214d3485248.exe
Resource
win10v2004-20220901-en
General
-
Target
5ea4a54b8778bef69dcfd4ea080e3fc7077a82797cdaa8ff60ac2214d3485248.exe
-
Size
400KB
-
MD5
937f2c33de9e38de79ad30ce7fc74705
-
SHA1
cd58f0511142c588049dee66c3047b88bb57806d
-
SHA256
5ea4a54b8778bef69dcfd4ea080e3fc7077a82797cdaa8ff60ac2214d3485248
-
SHA512
aa3f1635783df2bdaf344129a925e1b4c6e4af7776f7b9c9a04610a775b2760c79177fad8acf3c5c833d28b7bc5dfd058eb86758debd13826afd01d13ea4fdcc
-
SSDEEP
6144:m+5SY2+5yZzoW4Hm7XdTqr1+LC87iiFLd1//KSkl8aIrA6mJOl:lQVbz9qrcb7jtdlkNyoOl
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
5ea4a54b8778bef69dcfd4ea080e3fc7077a82797cdaa8ff60ac2214d3485248.exedescription pid process Token: SeDebugPrivilege 1364 5ea4a54b8778bef69dcfd4ea080e3fc7077a82797cdaa8ff60ac2214d3485248.exe