Analysis
-
max time kernel
30s -
max time network
34s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
31/03/2023, 04:47
Static task
static1
Behavioral task
behavioral1
Sample
76ee151db592d2d4fc40090d29377b79edbc33f1445ed63566a7f6892dc0d064.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
76ee151db592d2d4fc40090d29377b79edbc33f1445ed63566a7f6892dc0d064.exe
Resource
win10-20230220-en
General
-
Target
76ee151db592d2d4fc40090d29377b79edbc33f1445ed63566a7f6892dc0d064.exe
-
Size
63KB
-
MD5
6790f5477fd0f2c8fedba93d7c3a366d
-
SHA1
51b8c2a24460823c650464f47cf6362b156a732d
-
SHA256
76ee151db592d2d4fc40090d29377b79edbc33f1445ed63566a7f6892dc0d064
-
SHA512
bb0222c528aae62d666521bd8b4668de337a6a7de8b58c8f252410695e374f829f82602e839dbb610228db7abfc1b2dc000fd0ba0207cd89418b62546f60b874
-
SSDEEP
768:fGsKfzI7wLgHFz/tJtSsBaC2x0T7VvgLLSzMbEJskwMj7ttGUAKS0RGRQz:fHGsacFTtSTC2x0gLQMbETZMUbRGI
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1996 76ee151db592d2d4fc40090d29377b79edbc33f1445ed63566a7f6892dc0d064.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1996 76ee151db592d2d4fc40090d29377b79edbc33f1445ed63566a7f6892dc0d064.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\76ee151db592d2d4fc40090d29377b79edbc33f1445ed63566a7f6892dc0d064.exe"C:\Users\Admin\AppData\Local\Temp\76ee151db592d2d4fc40090d29377b79edbc33f1445ed63566a7f6892dc0d064.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1996