Analysis
-
max time kernel
8s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-10-2022 05:27
Static task
static1
Behavioral task
behavioral1
Sample
7e9dc695fa671680871d62dd8521b4833fcbfc00a4e5da792083b38c7870d7cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
7e9dc695fa671680871d62dd8521b4833fcbfc00a4e5da792083b38c7870d7cd.exe
Resource
win10v2004-20220812-en
General
-
Target
7e9dc695fa671680871d62dd8521b4833fcbfc00a4e5da792083b38c7870d7cd.exe
-
Size
424KB
-
MD5
7c40b634eede572b07ff7a01b58241e3
-
SHA1
4100efcc1336945fad2de3dac21faa7056b1ba4c
-
SHA256
7e9dc695fa671680871d62dd8521b4833fcbfc00a4e5da792083b38c7870d7cd
-
SHA512
0b04c3e70b67cb6c5c2e3dcdc3c47efd1bfbbb8f12411577b6217cceb7359307485257ce017456865f12886018888904316aa51c2fe2c0451dc4b93dda046d3a
-
SSDEEP
12288:EmM+X6gSTFp6q5ePiWkO1AeV5WhtblCJxfS6:zMq6gSTLj5f5O5u5OR1
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
7e9dc695fa671680871d62dd8521b4833fcbfc00a4e5da792083b38c7870d7cd.exedescription pid process Token: SeDebugPrivilege 1280 7e9dc695fa671680871d62dd8521b4833fcbfc00a4e5da792083b38c7870d7cd.exe