Analysis
-
max time kernel
101s -
max time network
48s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
23-11-2022 12:39
Static task
static1
Behavioral task
behavioral1
Sample
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe
Resource
win10v2004-20220812-en
General
-
Target
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe
-
Size
301KB
-
MD5
c7d172509750dfd3cdc7ec77b3df1f53
-
SHA1
b3728d48dbefecff4ef1fb027b9fc58ab9294424
-
SHA256
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303
-
SHA512
9f58ad28674d525ef1d33799e0df32d006db3916e691330026cb8ac21cc68debabc967fc927d2f7ca938c22c6dbbe21597902a7c335f1b81df85c096dd975096
-
SSDEEP
6144:TbsuQBfhfqt9g4ojrlF5BfS0TgrjZb6LrpiBc2mfJl/0cdvB2:TA3/BfVTUp6LrpiB8Nj/
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 17 IoCs
Processes:
f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exedescription pid process Token: SeDebugPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: 33 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe Token: SeIncBasePriorityPrivilege 1184 f9f5885687dafc129b580da55c0d2a66307ec04b73a553721fd526c5115f5303.exe