Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
01-09-2023 05:52
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
lz.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
lz.exe
Resource
win10v2004-20230831-en
windows10-2004-x64
7 signatures
150 seconds
General
-
Target
lz.exe
-
Size
388KB
-
MD5
4ff84ca1c02088f313c97694244cb2a4
-
SHA1
d2ffff7d201ac6236d3d091047f498c11bae00d6
-
SHA256
f3126ddd86d1e048db68f22cb1de5de871282bbd5764c4c77867042c8f1aab93
-
SHA512
0ab79b098be51c4035871e1b85bb815954a0c936fb9bc5bc598ac824e1c4e45d5f6b56f4f3e4a063c82a91ab30cb953018abc9161e3b2cfdf785d97d6a09d00b
-
SSDEEP
12288:tCspLdeVEn/oEehNiNsF9hS2Oga+nqgU+1kkqabCtXSXNcqye9cBz:tCULoVEn/oEsA/2OgVqgU+1kkqabCtXB
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
lz.exedescription pid process Token: SeDebugPrivilege 1560 lz.exe