Analysis
-
max time kernel
119s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
07/08/2023, 04:52
Static task
static1
Behavioral task
behavioral1
Sample
Specx.exe
Resource
win7-20230712-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Specx.exe
Resource
win10-20230703-en
2 signatures
150 seconds
General
-
Target
Specx.exe
-
Size
1.8MB
-
MD5
f8ed22f5bb54f2b4906b602e55ab56e1
-
SHA1
9a4f59afd6974802b2c6f0ef7d3d5c4dab3db832
-
SHA256
0ebed279fa0ecd6d549d1ffd92c863769cfa29c38daad73a8e668575a7efc57d
-
SHA512
8657561baece0f5ddb15020b166e1ea8b6787188084f1d0b522a64ab39b60382d12b88df98fbfe53ae54edd6f9b1eacb1fadb6be2e7458eac2b73b7e99468cf8
-
SSDEEP
24576:vPABanooMW/8umFbh8A0SsKFucT+KNgxyscRU7ecSgL6y+gk+rnxdarFmPr:vP1uB0SV1+KSxyrRUzS65+x+rnxYrcPr
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2564 Specx.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2564 Specx.exe