Analysis
-
max time kernel
7s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-10-2022 11:55
Static task
static1
Behavioral task
behavioral1
Sample
987b53381225e6a6ceae4ec2f19d51d1beaa00cef55773c92ec31341fd3c8eb9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
987b53381225e6a6ceae4ec2f19d51d1beaa00cef55773c92ec31341fd3c8eb9.exe
Resource
win10v2004-20220812-en
General
-
Target
987b53381225e6a6ceae4ec2f19d51d1beaa00cef55773c92ec31341fd3c8eb9.exe
-
Size
360KB
-
MD5
dbba8491644acf773a7ade54a01181b0
-
SHA1
60220c18cead8c45b77fc4bc431650e4793a97e6
-
SHA256
987b53381225e6a6ceae4ec2f19d51d1beaa00cef55773c92ec31341fd3c8eb9
-
SHA512
771efbea0cf149bc2448f5f7f4c8c16dfea660ed82035de3a67a090fb39cfe9efeb5f64e1e689bb671fd027a9448bec24e7b3a1f25fd623a5f1a1e2213c79f60
-
SSDEEP
6144:kbxWqS4cQubBuQEFpyPdD6pE7e6iWiSunrany7nZ+f5vSMnb3on:kb4rQ2BuxF7wl4n+y7Z+f5vdon
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
987b53381225e6a6ceae4ec2f19d51d1beaa00cef55773c92ec31341fd3c8eb9.exedescription pid Process Token: SeDebugPrivilege 1480 987b53381225e6a6ceae4ec2f19d51d1beaa00cef55773c92ec31341fd3c8eb9.exe