Analysis
-
max time kernel
12s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
22-10-2022 15:05
Static task
static1
Behavioral task
behavioral1
Sample
67733a26f813e0384bf4a727fcd6af8253e88ea7a13f45e6b6d3ba78cfcede0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
67733a26f813e0384bf4a727fcd6af8253e88ea7a13f45e6b6d3ba78cfcede0c.exe
Resource
win10v2004-20220901-en
General
-
Target
67733a26f813e0384bf4a727fcd6af8253e88ea7a13f45e6b6d3ba78cfcede0c.exe
-
Size
424KB
-
MD5
c9489c311cef8e2fd8b25202625f8300
-
SHA1
fc8278fc91cfe0adb178db023a05be60da51a877
-
SHA256
67733a26f813e0384bf4a727fcd6af8253e88ea7a13f45e6b6d3ba78cfcede0c
-
SHA512
d7429ceb069e6f2069ef49550764ca8f69c6a147516fb43c3a00a5792332d404cc69f59f4402609de7da4b7d159bfc790af09d62cbbc1e46245e42af3cff6c29
-
SSDEEP
12288:HL2WjWgDhrhjxaRaDz7z4HMLzskGWoXblCJxfS6:HDXpVx7f7dLoMorOR1
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
67733a26f813e0384bf4a727fcd6af8253e88ea7a13f45e6b6d3ba78cfcede0c.exedescription pid process Token: SeDebugPrivilege 1200 67733a26f813e0384bf4a727fcd6af8253e88ea7a13f45e6b6d3ba78cfcede0c.exe