Analysis
-
max time kernel
141s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
18-08-2023 22:36
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SyncExpSim.exe
Resource
win7-20230712-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
SyncExpSim.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
SyncExpSim.exe
-
Size
873KB
-
MD5
14ab38a5c71c6f6c3d42bc64a8fc4f7f
-
SHA1
023c731cf942b174da2e5e9b901202a1a207d6cf
-
SHA256
606def7636b17e99407b99381453c34553f1bc7bcf761ab4bf06a2dbb0dcf5b8
-
SHA512
92e204aaf3a592d4bf660ec139e573dc0d098f32ab089198bece5657ad29597da30a6076734497be9922a4038808b75cec0ca6a2b052b1450402d34b8c535471
-
SSDEEP
12288:FPrAny1JSuEoKLEamGekM9NWapY5PujKKSpyecbYq5T52A4FwASuSAoER+odSpY+:yny3JXNKFP0Dl52FHSuSAo2SH
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 2556 SyncExpSim.exe Token: SeIncBasePriorityPrivilege 2556 SyncExpSim.exe