Analysis
-
max time kernel
61s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20220901-en -
resource tags
arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 10:08
Static task
static1
Behavioral task
behavioral1
Sample
a4dd0ef581fd4cf5b3f866f6ad82866829a0acfdb7ffbc88fdb2f1412579fe51.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a4dd0ef581fd4cf5b3f866f6ad82866829a0acfdb7ffbc88fdb2f1412579fe51.exe
Resource
win10v2004-20220901-en
General
-
Target
a4dd0ef581fd4cf5b3f866f6ad82866829a0acfdb7ffbc88fdb2f1412579fe51.exe
-
Size
495KB
-
MD5
26cb4d3f6af3af4377a646a8283285d7
-
SHA1
987e9cae41faf6798bd4de2b9e697495bf537a32
-
SHA256
a4dd0ef581fd4cf5b3f866f6ad82866829a0acfdb7ffbc88fdb2f1412579fe51
-
SHA512
94f95405914e05f961676d8590e52e2802434c05c26db0733160a93c969dfe8b7bef80328062555593a023f27c97ea61b1b00d95d31d23e59ffcf70706ad5694
-
SSDEEP
12288:xFk2TauNdjsyITnMAzSXkwSDsSPHXPVgToXcKlM:FT71LITnMTJSt2MXW
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 3704 a4dd0ef581fd4cf5b3f866f6ad82866829a0acfdb7ffbc88fdb2f1412579fe51.exe Token: SeIncBasePriorityPrivilege 3704 a4dd0ef581fd4cf5b3f866f6ad82866829a0acfdb7ffbc88fdb2f1412579fe51.exe