Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
21/08/2023, 06:08
Behavioral task
behavioral1
Sample
bPbd.exe
Resource
win7-20230712-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bPbd.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
bPbd.exe
-
Size
32KB
-
MD5
5a7c6112d7a5b57754c4a7356363e4c1
-
SHA1
09aa3118bfec7c9ad065ca78bf4d124c28823dc6
-
SHA256
57ff04bbef6df7f5c65fdad2dd633ff532abde0f209b425fcf24c642c0ec899a
-
SHA512
26555e5192d24d9a3a697de404d6e97c0e3366ff0c73e38385d8ff4dec31fbfc0a024b6cf937a261699a83666f91825bedf344d5b702efef8544dea4fc2d96dc
-
SSDEEP
384:o0bUe5XB4e0XGOnjHdqlzkB8N/uWTHtTUFQqzFbqObb3f:dT9BuVrdKTgbv
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe Token: 33 4844 bPbd.exe Token: SeIncBasePriorityPrivilege 4844 bPbd.exe