Analysis
-
max time kernel
173s -
max time network
198s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
30-11-2022 17:23
Static task
static1
Behavioral task
behavioral1
Sample
50bd4097d131a0cb93d9e6d7fa5ee6e5f32009841c34dd92928e2b0677ebb1be.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
50bd4097d131a0cb93d9e6d7fa5ee6e5f32009841c34dd92928e2b0677ebb1be.exe
Resource
win10v2004-20220812-en
General
-
Target
50bd4097d131a0cb93d9e6d7fa5ee6e5f32009841c34dd92928e2b0677ebb1be.exe
-
Size
37KB
-
MD5
a57059121da1c80b6a2f29007c279aad
-
SHA1
441764fbb00f2817776432ea6b4a35ea5b2c0d85
-
SHA256
50bd4097d131a0cb93d9e6d7fa5ee6e5f32009841c34dd92928e2b0677ebb1be
-
SHA512
2fdbbf71bfb75815b8c1cffe0380b0a1c89bacfa9e752eac4bc8b9650a3cc18916c04855e54e2d8ff5e2be8bfed18fe720eb0cf2ce515ea88428043f9f39bc2c
-
SSDEEP
384:Fs2gHU9E6nPdcKN9AVH84ijuMCQQ/T746gfqRVb+d0E7hOh257xAookwMawAlK43:HwDTAyVboD37FSKYmediLe7
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
50bd4097d131a0cb93d9e6d7fa5ee6e5f32009841c34dd92928e2b0677ebb1be.exedescription pid process Token: SeDebugPrivilege 1112 50bd4097d131a0cb93d9e6d7fa5ee6e5f32009841c34dd92928e2b0677ebb1be.exe