Analysis
-
max time kernel
153s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2022 16:08
Behavioral task
behavioral1
Sample
bH9v.exe
Resource
win7-20220812-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bH9v.exe
Resource
win10v2004-20220812-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
bH9v.exe
-
Size
32KB
-
MD5
13785043ba4113cda79f68b2a4ef6236
-
SHA1
95b436de53b908fb4aaa8f1f2679dbbee777761a
-
SHA256
b05939920d359a0f2d4e03431a81ab7ee33c831f59f47f569ccdc6750a1827b6
-
SHA512
ca2b10c5a488de21f0291a5ca9975ba0247d94c7f04c1780768c13364f7fb5cab191643e9437f2f43e41cd97d9126d3a7bd40c5e3c032916b36c669176cc5e49
-
SSDEEP
384:W0bUe5XB4e0XLOfOLsw0Q0mS03AWTxtTUFQqzF2ObbR:3T9Buyk555dUbR
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 33 IoCs
Processes:
bH9v.exedescription pid process Token: SeDebugPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe Token: 33 1128 bH9v.exe Token: SeIncBasePriorityPrivilege 1128 bH9v.exe