Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20230712-en -
resource tags
arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system -
submitted
21/08/2023, 11:52
Static task
static1
Behavioral task
behavioral1
Sample
d779c71640ede9372f3e442cef916a6f979a7c450c887b06d4567bca76e486f1.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
d779c71640ede9372f3e442cef916a6f979a7c450c887b06d4567bca76e486f1.exe
Resource
win10v2004-20230703-en
General
-
Target
d779c71640ede9372f3e442cef916a6f979a7c450c887b06d4567bca76e486f1.exe
-
Size
11.5MB
-
MD5
70cc23c117af367b910aef4e5eba495e
-
SHA1
f9b0cc4888dcb567fa307f00d3640ef36d99cf82
-
SHA256
d779c71640ede9372f3e442cef916a6f979a7c450c887b06d4567bca76e486f1
-
SHA512
ea50aa799e3d1fffcf95f323f92b1268d98b099cda5831012946438a5a29e73827960f92814e97c50942a607a2e70936057ca49558b236f0bb749ce1ec4e5a73
-
SSDEEP
98304:G3F47JADa4N4pnWeboIJpgptp7ICfoEU09+nnCfM3BjFVZU2VKH4OXk8:OLVlH5VRL
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2444 d779c71640ede9372f3e442cef916a6f979a7c450c887b06d4567bca76e486f1.exe