Analysis
-
max time kernel
141s -
max time network
33s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
05-06-2023 20:05
Behavioral task
behavioral1
Sample
xBKARIYrYkwJ.exe
Resource
win7-20230220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
xBKARIYrYkwJ.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
xBKARIYrYkwJ.exe
-
Size
32KB
-
MD5
ffe54c1b19159203974f105c690d691c
-
SHA1
8215df1c0ed63b2775d1086b4d25f7626e229900
-
SHA256
0a349a9b956f99d57b6e1c2119b65c6389930272672457f2b52ed0b91b92ac83
-
SHA512
f3de610f094f55580b4ec642cdaa5b82da1754c8ec9e9f51e5748981f5f5d7052e1a849181f377eeef574bcea9d1db055601ea9cf954cfd55bb27e793dbf757f
-
SSDEEP
384:s0bUe5XB4e0X+OteggUBZIGnWTntTUFQqzFcObb/:5T9BudwggUBZIJGb/
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 23 IoCs
Processes:
xBKARIYrYkwJ.exedescription pid process Token: SeDebugPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe Token: 33 2020 xBKARIYrYkwJ.exe Token: SeIncBasePriorityPrivilege 2020 xBKARIYrYkwJ.exe