Analysis
- max time kernel
150s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
05/07/2023, 16:09
Behavioral task
behavioral1
Sample
bOcZ.exe
Resource
win7-20230703-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bOcZ.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bOcZ.exe
- Size 32KB
- Sample230705-tly8bsfd4v
- SHA256 1d4229ed0b6446a14621498377722898f8954ad42237756d22093ebc99eb1d66
- MD5 3fc52a9db1fd2c4286e9163d87f6fcce
- SHA1 cdc4559ef0ae9ca0010014cf20a0e20110149b8b
- SHA512 05b03bf9a7245c91d80cd1d108e6807d8e611c82bf8093bc87fc310e844f74d52fb263f2e9730d3e7baf5c9ba746785f97dc182cb9b82699f23f123bd9c50d03
- SSDEEP 384:R0bUe5XB4e0XWOPnw0Q0mS03AWTxtTUFQqzFnfObbh:KT9BuFI55dIsbh
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe Token: 33 1304 bOcZ.exe Token: SeIncBasePriorityPrivilege 1304 bOcZ.exe