Analysis
- max time kernel
148s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
07/09/2023, 04:35
Behavioral task
behavioral1
Sample
x4UJmkZEV2Tj.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
x4UJmkZEV2Tj.exe
Resource
win10v2004-20230831-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target x4UJmkZEV2Tj.exe
- Size 32KB
- Sample230907-e7n7xsee6v
- SHA256 663c2b9e7d92bf199c066fe3f0f7f99092d280993ffabee22b42483b55d4b4c5
- MD5 751125b93116fcb44bfd476b01a819c4
- SHA1 eba17c2b038c6a3fe17d6ba81e0ed8c26a3ff500
- SHA512 e1cc427e1f7c515ec6a1aa05c7c2d40ce4f1ca12af0a111d6bef60e5271e00fc54314134bc39a570417ea138bfff28caff7955cb9130bbe32f6310fa9b742fcc
- SSDEEP 384:O0bUe5XB4e0XfOZzw0Q0mS03AWTxtTUFQqzFwObbV:fT9Bu2C55d6bV
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe Token: 33 3976 x4UJmkZEV2Tj.exe Token: SeIncBasePriorityPrivilege 3976 x4UJmkZEV2Tj.exe