Analysis
-
max time kernel
13s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
22-10-2022 12:41
Static task
static1
Behavioral task
behavioral1
Sample
4abdace85327c89f59a735500b0bdaf46a19836dea447febf9003c9be54d7a24.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4abdace85327c89f59a735500b0bdaf46a19836dea447febf9003c9be54d7a24.exe
Resource
win10v2004-20220812-en
General
-
Target
4abdace85327c89f59a735500b0bdaf46a19836dea447febf9003c9be54d7a24.exe
-
Size
424KB
-
MD5
bd62e5f337506c58955c6cbd644239e0
-
SHA1
22aea8553c104e98c13cc8959497632ce3fecb3e
-
SHA256
4abdace85327c89f59a735500b0bdaf46a19836dea447febf9003c9be54d7a24
-
SHA512
bab3394cecb282ef415a63a6e971f9108094109b41512feb60f7976463cc3d927e6fbd7b58b092e1027da2e92d2c122a2dcd859237978e49f0bb95dd3342ee0e
-
SSDEEP
12288:tmJqaEwQLysD/XDz3qzRdW1DzHpblCJxfS6:tgMLyWDbkElOR1
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
4abdace85327c89f59a735500b0bdaf46a19836dea447febf9003c9be54d7a24.exedescription pid process Token: SeDebugPrivilege 580 4abdace85327c89f59a735500b0bdaf46a19836dea447febf9003c9be54d7a24.exe