Analysis
-
max time kernel
9s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
24-10-2022 05:09
Static task
static1
Behavioral task
behavioral1
Sample
cbb69a74a9f8ec04cb71f5857eb55b6ed399dbf92ed6ed2de0738c3b5f9a2b43.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cbb69a74a9f8ec04cb71f5857eb55b6ed399dbf92ed6ed2de0738c3b5f9a2b43.exe
Resource
win10v2004-20220812-en
General
-
Target
cbb69a74a9f8ec04cb71f5857eb55b6ed399dbf92ed6ed2de0738c3b5f9a2b43.exe
-
Size
424KB
-
MD5
bc5293fc4535b15ad670c8a58d9d2560
-
SHA1
4ec663d224d029b3fba0ae701522439c26395c87
-
SHA256
cbb69a74a9f8ec04cb71f5857eb55b6ed399dbf92ed6ed2de0738c3b5f9a2b43
-
SHA512
a0ff20a077fc6f8fcff1c3321acf8ff954896764bd71923065a93a197c715d9fd044958434a026d3461fcf273f3fc69523ddb985b70033c780a1eae4e492c707
-
SSDEEP
12288:amM+X6gSTFp6q5ePiWkO1AeV5WhtblCJxfS6:5Mq6gSTLj5f5O5u5OR1
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1348 cbb69a74a9f8ec04cb71f5857eb55b6ed399dbf92ed6ed2de0738c3b5f9a2b43.exe