Analysis
-
max time kernel
141s -
max time network
134s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
arch:x64arch:x86image:win10v2004-20230703-enlocale:en-usos:windows10-2004-x64system -
submitted
28/08/2023, 17:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sample.exe
Resource
win7-20230712-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.exe
Resource
win10v2004-20230703-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
sample.exe
-
Size
210KB
-
MD5
aa53b49466385185d27209e5eb28ed7a
-
SHA1
e519ffb33c58760c40139039324f2c044ea85564
-
SHA256
8820174c886cd517334df9b2b4395bc504a8fe471e7b60f920564a0405c2631a
-
SHA512
c4b754037de2db565e85d369e27f8a809d79dfc84a154bf806bf3aa27d5144853e9edf245395a6f6e8e81a9fd0cbdcc2438cc4aefaaa0d3cd8648fa6665816f0
-
SSDEEP
3072:A8GYBy0NYz1IEb4Cq6DiHBSK+vM/+U9s/G/WGNa/J2e0adH0ZP4Fb19R7:ZByaYzlPiHoKf/+U2++h/Ey1RJj
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 62 IoCs
pid Process 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe 864 sample.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 864 sample.exe