Analysis
-
max time kernel
187s -
max time network
192s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system -
submitted
05/12/2022, 15:03
Static task
static1
Behavioral task
behavioral1
Sample
3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f.exe
Resource
win10v2004-20220812-en
General
-
Target
3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f.exe
-
Size
88KB
-
MD5
6e20aa8f004017763ac6f8628499cfbe
-
SHA1
3cddae986f6d5e3528014be4a4b7d14717e6eefb
-
SHA256
3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f
-
SHA512
6538d9f1a0e78d4263270d6e185a6316af506a07050637235f74ed3d2931d52f4a2fc7efa5fcedcb4d343e15d182e3845ac5d59a9c7a56d8adfb18b0364c913a
-
SSDEEP
1536:ay5nTJF5K7eb0mLv7bZvWm1eMOEI3PXASJUAJf8e1CDQ:xVQKbX7bZvdeMOEOoShJf8vQ
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2088 3b0cf0f96a968034bf7f605b2c54e14b93c37f81b1a2b1995ccb12e95cd0236f.exe