Analysis
-
max time kernel
2s -
max time network
31s -
platform
windows7_x64 -
resource
win7-20221111-en -
resource tags
arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system -
submitted
24-11-2022 00:37
Static task
static1
Behavioral task
behavioral1
Sample
8b61efc1249aed336c23d5e408f6f4a987850ae22afb11a11de00647c81768c6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
8b61efc1249aed336c23d5e408f6f4a987850ae22afb11a11de00647c81768c6.exe
Resource
win10v2004-20220812-en
General
-
Target
8b61efc1249aed336c23d5e408f6f4a987850ae22afb11a11de00647c81768c6.exe
-
Size
104KB
-
MD5
06b04578f974c356e287153a3bfcfcc0
-
SHA1
503d112f6ad1f785c9c6de9ec2aa8bd6503df5d0
-
SHA256
8b61efc1249aed336c23d5e408f6f4a987850ae22afb11a11de00647c81768c6
-
SHA512
3ba8e5e770222a2abd9cbc062452315cf1290d30f5f67465136dbb8965d7f8655f0f31fe2d937943bcd2d399dccb0fe8088f7e14e4bdbb75cc8e852e7b9ad4f6
-
SSDEEP
3072:/yGtLWeaVXwwtUbsg6pt7OaCVRdTfaMk:jtLnaVAwtU+p57C9Tfa
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
8b61efc1249aed336c23d5e408f6f4a987850ae22afb11a11de00647c81768c6.exedescription pid process Token: SeDebugPrivilege 960 8b61efc1249aed336c23d5e408f6f4a987850ae22afb11a11de00647c81768c6.exe