Analysis
-
max time kernel
26s -
max time network
30s -
platform
windows7_x64 -
resource
win7-20230621-en -
resource tags
arch:x64arch:x86image:win7-20230621-enlocale:en-usos:windows7-x64system -
submitted
30/06/2023, 10:47
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
qiaanxunsw18.9.exe
Resource
win7-20230621-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
qiaanxunsw18.9.exe
Resource
win10v2004-20230621-en
1 signatures
150 seconds
General
-
Target
qiaanxunsw18.9.exe
-
Size
14.2MB
-
MD5
2fa6b5fed359368f9b187796285b56a5
-
SHA1
4f88d7fe02e076b88d0ba9a4ff0a18c2d960b1e3
-
SHA256
2bca8fdc034853657137e7ff01354cb8c74576ebfa4c6a532c301be32ee25d00
-
SHA512
0f8902e559443e412d9a600a452c29a73bbbf124219af8640871f52a3025aa3abde732f7a9e053899813be7cca4017ceae1b88213ceb30465c4c22cca297099d
-
SSDEEP
196608:d7kLTMGkvWQPbi5fbxl8kfeEWPkLKTANAF:pgdkfW51OQSkLCA2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1748 qiaanxunsw18.9.exe