Analysis
- max time kernel
273s - max time network
313s - platform
windows10-2004_x64 - resource
win10v2004-20221111-en - resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system - submitted
02/12/2022, 20:16
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220901-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
1 signatures
150 seconds
General
- Target file.exe
- Size 500KB
- Sample221202-y145caaf87
- SHA256 8530384fa6b45ff0c2b2ea199c016f81b60fe8b7c846a7103f90b06691a4e01d
- MD5 666043e8308a8b85df8565950991e85c
- SHA1 bfeb02b362c2574323e068d57b83a4d56095b544
- SHA512 a363d3d5050d5ec3a487cdef30f0df47b662b164ee0403242616d2874d13b1e2debf70c7e8e5bfa1cf7ec3a86fa459b1d92fd182cc085c5a60a116da1935ba40
- SSDEEP 12288:yTPvnrfLMmZ/rNIJXTyL8S1B6qCpWK7oXPK8JbE2w:WvrChursFtIn8
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeDebugPrivilege 3720 file.exe Token: SeDebugPrivilege 3720 file.exe Token: SeLoadDriverPrivilege 3720 file.exe