Analysis
-
max time kernel
157s -
max time network
166s -
platform
windows7_x64 -
resource
win7-20220812-en -
resource tags
arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system -
submitted
03-12-2022 23:40
Static task
static1
Behavioral task
behavioral1
Sample
f9ea675a77456e3e57650abbad78f06f62d4bfc593873be1ffe057249a3c2074.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9ea675a77456e3e57650abbad78f06f62d4bfc593873be1ffe057249a3c2074.exe
Resource
win10v2004-20220901-en
General
-
Target
f9ea675a77456e3e57650abbad78f06f62d4bfc593873be1ffe057249a3c2074.exe
-
Size
71KB
-
MD5
55068da4172a558f396292cbcc6a2c33
-
SHA1
11bd9cfb2da07fbc2c9ca361e8d77e70f506f33f
-
SHA256
f9ea675a77456e3e57650abbad78f06f62d4bfc593873be1ffe057249a3c2074
-
SHA512
f926a8601eac87e9c6e2af0f97ef5a43e0999fbb4b6273694f01d68d6aa402e77fd2293da469f236d6d2b325eabe2516e9f49658559cde5bd07743943c881148
-
SSDEEP
1536:qC2yc/j29iCLHdg0qvP+18WKGGeNw4ilOOjzSMC9OeSiA:qNyc/ykBP+1sgGhlOOPSyniA
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1108 f9ea675a77456e3e57650abbad78f06f62d4bfc593873be1ffe057249a3c2074.exe