Analysis
- max time kernel
149s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
02/09/2023, 10:43
Behavioral task
behavioral1
Sample
41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe
Resource
win10v2004-20230831-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe
- Size 32KB
- Sample230902-msbx2scc95
- SHA256 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb
- MD5 221ed84719bdb506ed8bf9b5ac3c9ff5
- SHA1 bb134337a5168957bc38bada72e1f258583f3a6d
- SHA512 5c8b1b131df3ae1db4369a44b2353b9482827317178646bfe00a4446430debf98aa447ac8f7977e514332fc5a7800c215cacab177419402f213c1b069fddb56a
- SSDEEP 384:U0bUe5XB4e0XWODcc6WQzDaWTFtTUFQqz9OObbF:xT9BuFwcrQ9wbF
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: 33 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe Token: SeIncBasePriorityPrivilege 1412 41e72796c94e742fb3025e4a25d1ce8f5def33dd8cb061cb126e4074eb125dcb.exe