Analysis
-
max time kernel
143s -
max time network
164s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
05/05/2023, 20:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kp160132.exe
Resource
win7-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
kp160132.exe
Resource
win10v2004-20230220-en
3 signatures
150 seconds
General
-
Target
kp160132.exe
-
Size
341KB
-
MD5
e19fc45bbf4f45641107932fd33f3902
-
SHA1
34a086b99939cbb7884e7e3e14828cbe2c3051fd
-
SHA256
02f93b19abcb1cbe45ed712fca6d0a12003d4773ae2542e6e0c6beef72f893f0
-
SHA512
d6884f90ab8936bfe05228f6e0b0607b808dc55b48690794b973d34bde0e7a2ed68ea903a18c9add8b362d42623e3273fae97d56fde93f9e9131d80cfda0b37c
-
SSDEEP
6144:4PvSpHugNiXhqlniIVdUNg9LcR6IbPByGEJB5/xgf2g2T:4PvSQqlniIVdUN0cRjbPB6Bx8I
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 944 kp160132.exe