Analysis
-
max time kernel
143s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
05/05/2023, 20:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kp242852.exe
Resource
win7-20230220-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
kp242852.exe
Resource
win10v2004-20230220-en
3 signatures
150 seconds
General
-
Target
kp242852.exe
-
Size
340KB
-
MD5
57bb5bfe83c9272884f5a377b5b65f54
-
SHA1
2b9afbd2f74fa583f4a3987a93ed6fea9b5b31b8
-
SHA256
b421398a14f07c8509dd167a0941e0e737a9006c8813028719a06bcd52b6082b
-
SHA512
08a432539ccfe266522a3a8d485af078740197000883831dfaa31e9b9b0c0b9692dc69240228ca0dc90e163feae2de11ea67a4f7339126c70cf9a6ee40b4f85f
-
SSDEEP
6144:tXZfAxwBD1PNeLCkuBWN6uv+KZ9jvAVzx1cTbGKAUqW+gOG32:tXZfAxYvYC7WN6FN18bGKAA+
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2012 kp242852.exe