Analysis
-
max time kernel
8s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
24-10-2022 06:30
Static task
static1
Behavioral task
behavioral1
Sample
d5072da0268ddd4e9b3ff085065f6cd37a4775b2dd28accc760bdb26bb213c03.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
d5072da0268ddd4e9b3ff085065f6cd37a4775b2dd28accc760bdb26bb213c03.exe
Resource
win10v2004-20220812-en
General
-
Target
d5072da0268ddd4e9b3ff085065f6cd37a4775b2dd28accc760bdb26bb213c03.exe
-
Size
424KB
-
MD5
8645d34c68843e52ab1e135c360c9d7c
-
SHA1
19944335d09cf33d628581c83212b1774d519829
-
SHA256
d5072da0268ddd4e9b3ff085065f6cd37a4775b2dd28accc760bdb26bb213c03
-
SHA512
ec51fc5b7ab40fb2e1007dbaf8eb938620c2b325e78397bd42c9b2853f8a44f54c999dfe733646af80248145beaafbe4cd90d3255d78f825fe04a6f3ff62d869
-
SSDEEP
6144:nVA8n+saFT1r1Xu0MUHbhgD1fbVaQaYBK58vgVz8G8xypctxTmroXbftChXW3Ax4:nXJa71e01hqf8y46GYicnblCJxfS6
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
d5072da0268ddd4e9b3ff085065f6cd37a4775b2dd28accc760bdb26bb213c03.exedescription pid Process Token: SeDebugPrivilege 2032 d5072da0268ddd4e9b3ff085065f6cd37a4775b2dd28accc760bdb26bb213c03.exe