Analysis
-
max time kernel
165s -
max time network
189s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2022 10:42
Static task
static1
Behavioral task
behavioral1
Sample
3a326fba760e01e8599fa8d4ad781d3f8f6863455b83592e46f5edaa5eec5c4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a326fba760e01e8599fa8d4ad781d3f8f6863455b83592e46f5edaa5eec5c4d.exe
Resource
win10v2004-20221111-en
General
-
Target
3a326fba760e01e8599fa8d4ad781d3f8f6863455b83592e46f5edaa5eec5c4d.exe
-
Size
178KB
-
MD5
a5e38fcd7d79c8087acd3e62856e5003
-
SHA1
708c718abc89a8f42830adeda0d888075df90895
-
SHA256
3a326fba760e01e8599fa8d4ad781d3f8f6863455b83592e46f5edaa5eec5c4d
-
SHA512
831818394d1564c1272dfb69e5b39aab808283b143650cdc30662db816b07412cdf64e47824c4fe0a9d1d7bce45c4ef5feb9257527b2e9d69c2b3232145bb3ef
-
SSDEEP
3072:nLnpNT8HQ+sVRBMlrc0SQ5ehpdC+gKFmnLiAXaSbandLs3Vly2+dh:TQsVR85J5A4LpXaSb2f2+d
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1716 3a326fba760e01e8599fa8d4ad781d3f8f6863455b83592e46f5edaa5eec5c4d.exe