Analysis
-
max time kernel
118s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
21-08-2023 08:57
Static task
static1
Behavioral task
behavioral1
Sample
bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260.exe
Resource
win10v2004-20230703-en
General
-
Target
bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260.exe
-
Size
15.6MB
-
MD5
190603be15e25198194823c70f6e0c13
-
SHA1
b522aef99f69a01c14aade4b6e77f21a1e727e12
-
SHA256
bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260
-
SHA512
09bef3d5a7171097dee992566915f4f117861cd34a4b817081c1e01ad05235b492ff264c9791a5d7aa7d7faaae7afab9c16fb50ac20a80f31d7fcf497f96cb67
-
SSDEEP
196608:6tYFjz5k1h2soQUFivdo4YTGcg1aUp1gwL+4OEfj56gNtXJsmwjrKx0p6OqdNw/r:6tYVFk10sQivdICcgQG13brYjrKx0sGr
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1072 bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1072 bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260.exe 1072 bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260.exe"C:\Users\Admin\AppData\Local\Temp\bc11f00f62fa261e36fc9a8c25e4dad278f3db91ad2d0a98b78225e932d02260.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:1072