Analysis
-
max time kernel
149s -
max time network
158s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
21-11-2022 17:04
Static task
static1
Behavioral task
behavioral1
Sample
f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe
Resource
win10v2004-20220812-en
General
-
Target
f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe
-
Size
151KB
-
MD5
062dd343a6176ef4f87ec15b490effe0
-
SHA1
73440eee3b18192596b399f4928c52c5d82fe9a2
-
SHA256
f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82
-
SHA512
1790032924bf0aec56e470a0497ac98136e634b2271129d709d784241c769b294260a807ada042e2a7b197a369c16a5b4660dc43a08c529748143a15356a6482
-
SSDEEP
3072:Xdv73pgGPZb1CxAvOWPfuYitZburAbYJVww+dnYH7k:X3LRb1CxAv9fif+X+n
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: SeIncBasePriorityPrivilege 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe Token: 33 3364 f5234b074d6ed8b7c9c1ac968cf35cab3ab9af5e10fa0443c6377af899076c82.exe