Analysis
-
max time kernel
11s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-10-2022 07:48
Static task
static1
Behavioral task
behavioral1
Sample
885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906.exe
Resource
win10v2004-20220901-en
General
-
Target
885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906.exe
-
Size
424KB
-
MD5
823ece0c42f0a1527a81efe1cff9591a
-
SHA1
dc0fc3de6b66447a632d1055fe58d59e2f3c0099
-
SHA256
885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906
-
SHA512
c651c4641f9edc780b9eee94342eeafb0d074cbe3a196660c9c55e7ba54c653dfe6e9112e329ff6d1361cd43939725ae5d0b708042d28e51c1c99151af45a360
-
SSDEEP
6144:BJOrslDNrfqw5W9RtPLal1tBzAF2Rg/zUZjpMWMl4ZC824UzHoXbftChXW3AxfuJ:BJOrSNr4S77zAJzUZ1azKblCJxfS6
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906.exedescription pid process Token: SeDebugPrivilege 1520 885bd1f7da66a6fd57131d75c7074836565fddcc6c9fedf6f7bb71a4544d4906.exe