Analysis
- max time kernel
146s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
05/09/2023, 03:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
markov_small.exe
Resource
win7-20230831-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
markov_small.exe
Resource
win10v2004-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
payload.bin
Resource
win7-20230831-en
5 signatures
150 seconds
Behavioral task
behavioral4
Sample
payload.bin
Resource
win10v2004-20230831-en
3 signatures
150 seconds
General
- Target markov_small.exe
- Size 193KB
- Sample230905-ea4lcach7t
- SHA256 6813c99d910053cfa4ee065e0541a3230a9592dc6b2374ac2ff6f0ec99a3c364
- MD5 5f1aaf21e75572528618ac472264dcc3
- SHA1 fc011482338f2410df43ada061d49f4f6a497801
- SHA512 170a56bc8beee33a7c10e6a5845167012edd0e0bd95c604ab08690e94dea53595eb50634dc348173aed0bc164b24804f9a79c864fe43342ba120d687a4830349
- SSDEEP 3072:n7WTOWDBkvTf5oEkrR187sEZcGxvjinOZ+U9LlmoGMMOkPRCEpZp3:n7WTOWoTf0j87MGxvwMlpjUPpZd
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1484 markov_small.exe