Analysis
- max time kernel
148s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20230703-en - resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system - submitted
04/08/2023, 16:08
Behavioral task
behavioral1
Sample
bOEU.exe
Resource
win7-20230712-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bOEU.exe
Resource
win10v2004-20230703-en
1 signatures
150 seconds
General
- Target bOEU.exe
- Size 32KB
- Sample230804-tk7s3scd53
- SHA256 d7443e8971985f4cbd75219edfdedde221be125432c421d6b0d1537f7d8b36d5
- MD5 5fae1fc204f85528336f435f2af78c5b
- SHA1 6e8b3b6064269f4d8c98375380232e736842eb7b
- SHA512 e09a47f0742fecb7ab94148708f88ced11ca3abb5e60ef3559638e2df2acdcf036847fbbc2c325c8dc9ed82f63bba2c88b5a57536665f59efaa772f7f9bceb70
- SSDEEP 384:00bUe5XB4e0X+OSSCixBr/QZWTGtTUFQqzF5Obb+:RT9BudS9ifrYPPb+
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe Token: 33 720 bOEU.exe Token: SeIncBasePriorityPrivilege 720 bOEU.exe