Analysis
-
max time kernel
122s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
17-07-2023 06:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TT.gz.exe
Resource
win7-20230712-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
TT.gz.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
8 signatures
150 seconds
General
-
Target
TT.gz.exe
-
Size
147KB
-
MD5
841bc4b28567bc672d71cd8a86318236
-
SHA1
80ff2c2f2e6a5fb63f9d067b158410549ce3a9fd
-
SHA256
477a2d13d980cac6ec09b09eda410ea674cb8aa69da8a1e6e2a80fcf3b290c9a
-
SHA512
35660c01c79abad13d99757c4854092b6e3f8f736b892a92f7b6cf0f50a608e4f966f032aeefc3403e4bbda98f604ec25efed1feb5f329fcdbb02fd4bc33b479
-
SSDEEP
3072:oxmMRd5YFofTo4dXqJYNebTdz8rlmMtcDdNM8x/8v:osMRX04dXgYNeixbtcRNMz
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1788 TT.gz.exe