Analysis
-
max time kernel
275s -
max time network
339s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 00:11
Behavioral task
behavioral1
Sample
2dd9a5a8e64c1f5864554d1d2203c4a4.exe
Resource
win7-20221111-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2dd9a5a8e64c1f5864554d1d2203c4a4.exe
Resource
win10v2004-20221111-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
2dd9a5a8e64c1f5864554d1d2203c4a4.exe
-
Size
32KB
-
MD5
2dd9a5a8e64c1f5864554d1d2203c4a4
-
SHA1
f43093cc758e83b6673505ef1faaf4ec2e4a8d57
-
SHA256
ff00a7414edad0eeb2ce1e7e9919e7a635a5c1621246e91c5bf9e51778156bb8
-
SHA512
43a3c52b897af7f055bfb92cb2c781f0087ea5b5326cbf6b28df0411669493f07edd9e0e6056b4433f393c94a7b73ff856f58d2d3a9d55eda033028ddddee488
-
SSDEEP
384:N0bUe5XB4e0XuOdTixBr/QdWT6tTUFQqzFWObbK:eT9ButdifrYnIbK
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 19 IoCs
Processes:
2dd9a5a8e64c1f5864554d1d2203c4a4.exedescription pid process Token: SeDebugPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: 33 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe Token: SeIncBasePriorityPrivilege 4276 2dd9a5a8e64c1f5864554d1d2203c4a4.exe