Analysis
-
max time kernel
8s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-10-2022 08:55
Static task
static1
Behavioral task
behavioral1
Sample
8ccb96147d6198c9166b9619bfdc67b6f8a8e71318015e3679c6d5b9706f99a7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ccb96147d6198c9166b9619bfdc67b6f8a8e71318015e3679c6d5b9706f99a7.exe
Resource
win10v2004-20220812-en
General
-
Target
8ccb96147d6198c9166b9619bfdc67b6f8a8e71318015e3679c6d5b9706f99a7.exe
-
Size
404KB
-
MD5
eabd3a0897cd161d8ba35caea23d0556
-
SHA1
45216a4e48ef209fa244ec2425486db671d55530
-
SHA256
8ccb96147d6198c9166b9619bfdc67b6f8a8e71318015e3679c6d5b9706f99a7
-
SHA512
40e614c115727609b9ffc5b7ab9ec0c9f4b7162814aded05a3d817510d588ffbe58df419d493f57897df24fe4028ae2d651c21f9be25522badef1770dcbeff51
-
SSDEEP
6144:KhgE/69rEIaB8sa1h5kPxnrHBdoeevcQ91R1pQcy4p/FFf2qecRJA6mJOl:wgwGDLsaJkpnroeevca1jNtFFHRJoOl
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1684 8ccb96147d6198c9166b9619bfdc67b6f8a8e71318015e3679c6d5b9706f99a7.exe