Analysis
-
max time kernel
44s -
max time network
49s -
platform
windows7_x64 -
resource
win7-20220901-en -
resource tags
arch:x64arch:x86image:win7-20220901-enlocale:en-usos:windows7-x64system -
submitted
27-11-2022 14:32
Behavioral task
behavioral1
Sample
38241c490c2692f2df34ba8485af08d890f4bedd12ef93b49709e7e428011867.exe
Resource
win7-20220901-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
38241c490c2692f2df34ba8485af08d890f4bedd12ef93b49709e7e428011867.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
38241c490c2692f2df34ba8485af08d890f4bedd12ef93b49709e7e428011867.exe
-
Size
252KB
-
MD5
39f934e1adc1da5945c8eeaa6cf6b779
-
SHA1
d284cc1dbbfab65d5f5d31bc34707ec7667d5873
-
SHA256
38241c490c2692f2df34ba8485af08d890f4bedd12ef93b49709e7e428011867
-
SHA512
9362f221085595d28a25aa82d9e8f1b52a53dbd244fc9fcae512f6936689b8884867289d65c896bd1667f55f6df0d96cafaf107f4c0f9be0bc9b31e310038aa5
-
SSDEEP
6144:0Amn+/N1chOOhR9029VNMij5f25kruFgbDIQt:0KNPOt0tP5kqFgbDIQt
Score
8/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1396-54-0x0000000000400000-0x00000000004B7000-memory.dmp upx behavioral1/memory/1396-55-0x0000000000400000-0x00000000004B7000-memory.dmp upx behavioral1/memory/1396-56-0x0000000000400000-0x00000000004B7000-memory.dmp upx -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeSecurityPrivilege 1396 38241c490c2692f2df34ba8485af08d890f4bedd12ef93b49709e7e428011867.exe Token: SeDebugPrivilege 1396 38241c490c2692f2df34ba8485af08d890f4bedd12ef93b49709e7e428011867.exe