Analysis
-
max time kernel
8s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-10-2022 17:48
Static task
static1
Behavioral task
behavioral1
Sample
af4fa6e25172a4b6afb6600e1870848a45ea40e39c9954d22c78aa16001b2cff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
af4fa6e25172a4b6afb6600e1870848a45ea40e39c9954d22c78aa16001b2cff.exe
Resource
win10v2004-20220812-en
General
-
Target
af4fa6e25172a4b6afb6600e1870848a45ea40e39c9954d22c78aa16001b2cff.exe
-
Size
424KB
-
MD5
90a30dfa5221fb4209aa56666e689cbf
-
SHA1
7cdf5848ea7c7292696d6bae10f13efc80bd3606
-
SHA256
af4fa6e25172a4b6afb6600e1870848a45ea40e39c9954d22c78aa16001b2cff
-
SHA512
6dc85c74e3261e7ec7d3c96de80452d1ecf097e1cc7f89ae8cbf42bf5e6b850129d306415d8817d18e23c2207920eb29e7fd5d28abe59d5dfde6ef4cc7313e51
-
SSDEEP
12288:2y8abnEX/hUUn3Q7DTw+ZA3StJSvblCJxfS6:J5DEX/hnSwYACTOOR1
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 968 af4fa6e25172a4b6afb6600e1870848a45ea40e39c9954d22c78aa16001b2cff.exe