Analysis
-
max time kernel
193s -
max time network
212s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
03-12-2022 20:45
Static task
static1
Behavioral task
behavioral1
Sample
5ff6733bb790fe4edb16fc64137baf1f5578ac52857cead2a9ceb8d8bec9fb23.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
5ff6733bb790fe4edb16fc64137baf1f5578ac52857cead2a9ceb8d8bec9fb23.exe
Resource
win10v2004-20221111-en
General
-
Target
5ff6733bb790fe4edb16fc64137baf1f5578ac52857cead2a9ceb8d8bec9fb23.exe
-
Size
180KB
-
MD5
021f009f654eb1e98352a371f37bef1a
-
SHA1
501150b9bfe3d1807b1dac6ec7489f4254ee3d15
-
SHA256
5ff6733bb790fe4edb16fc64137baf1f5578ac52857cead2a9ceb8d8bec9fb23
-
SHA512
a95a8d8520c6da5659c121f18957037e5e5ebc8e1f717678826b62ac67924870e2927ebabd2d50748278a336321cf9f46a51995598e9179db30dac6b48d70507
-
SSDEEP
3072:CnI29kL7U8e2IYth/qdcSlBGEjZqMNAGUlbcDxu3zrWrAL3nR:/U8e2Tth/qJvA7INufaALXR
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3736 5ff6733bb790fe4edb16fc64137baf1f5578ac52857cead2a9ceb8d8bec9fb23.exe