Analysis
-
max time kernel
61s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
27-02-2023 10:29
Behavioral task
behavioral1
Sample
9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe
-
Size
86KB
-
MD5
6c13cfa37c442520c5a0f923aa93f1cb
-
SHA1
86f926f052a66b300272c18846802cc56c5a1700
-
SHA256
9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e
-
SHA512
7461d86002fa961f25b7b3841601088f7f19af6f14de10932e22d0aeef529181caafbde79e877f8c482bbafe984a08d6a849cd2241f3db87062c42d561ec1dd6
-
SSDEEP
1536:yDTOlmyW5XXrtxfyZ7V9N4INCxVnA2rbxM3pf7IO6CFQ0:uyqnbE7PWvy64
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes:
9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exepid process 4144 9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe 4144 9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe 4144 9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe 4144 9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exedescription pid process Token: SeDebugPrivilege 4144 9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe Token: SeDebugPrivilege 4144 9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe"C:\Users\Admin\AppData\Local\Temp\9c4b4f7a530bbef4d4b00126efac07c315127ed16cdb710b698bb3788780617e.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken