Analysis
-
max time kernel
144s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
09/03/2023, 04:12
Static task
static1
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20230220-en
1 signatures
150 seconds
General
-
Target
tmp.exe
-
Size
371KB
-
MD5
fcf17bb869c527c83eba15db716797a8
-
SHA1
1ed7e24ffb33f47ef94ef6ff2bfff9e3b95b39c7
-
SHA256
0572c03809fb256590da3a0b465cb3a4cd24eeb23f21b865d42c121c72cf76a4
-
SHA512
471dbff545684b39a398530e8db80277a6ae30f054f882de0474460e7bc22e90b1c59d5ef18ed9c11cd6b3ac98f6454dd8d337ba675b879c7d168573dfac1324
-
SSDEEP
3072:BxrKhF62TRyS4JLYfTxY+iJ1QGObe6p2vHL:BAF62TRZ4JLY9Y+G3ObZY
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4484 tmp.exe