Analysis
-
max time kernel
140s -
max time network
138s -
platform
windows7_x64 -
resource
win7-20230220-en -
resource tags
arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system -
submitted
07-06-2023 02:15
Behavioral task
behavioral1
Sample
da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Resource
win7-20230220-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe
-
Size
32KB
-
MD5
8a1b87eb807e29e30acf1b14c966a195
-
SHA1
7844dfd9bd26da45b7314a741cb6a123d0777d39
-
SHA256
da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520
-
SHA512
bbb04dc3651738478c778231f0220dd122a687fee238c2cd9142a36563df1e1b2943b4e6fabef842fc657a5386d258b76fcd39396cc4699e42c30feaca84bb93
-
SSDEEP
384:H0bUe5XB4e0XGOzT3pixEpfHWT6tTUFQqzFmObb2:MT9BuVv3piecb2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 23 IoCs
Processes:
da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exedescription pid process Token: SeDebugPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: 33 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe Token: SeIncBasePriorityPrivilege 1748 da1b306f486e416cc2c0254b610a066035901f5e133aa000501d0a3ce24a4520.exe