Analysis
- max time kernel
149s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20230831-en - resource tags
arch:x64arch:x86image:win10v2004-20230831-enlocale:en-usos:windows10-2004-x64system - submitted
07/09/2023, 17:29
Behavioral task
behavioral1
Sample
JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe
Resource
win10v2004-20230831-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe
- Size 32KB
- Sample230907-v2k63scd38
- SHA256 f6bff0a880ddaaf314e5da20654144241fc691abd06759bde68fcbb41cd36c85
- MD5 ab6bf3d6e2da55d65cdb4fdcf31aa663
- SHA1 c41c1f4d0c58e4a65e7207c0fb5eacf8ef7ecb62
- SHA512 f66d6a212cf7de32f2245d0d1c96ecd90031e07e9f8b400463c1a218a330041e0e749a1a0e0debda1480cbe458c9fd401d9cc3db37e8735eb3ff89169e7a8262
- SSDEEP 384:s0bUe5XB4e0XXOhbw0Q0mS03AWTxtTUFQqzFeObb9:5T9BueC55dEb9
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: 33 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe Token: SeIncBasePriorityPrivilege 732 JC_decodefd680c03dde492b27cd2ffa2d53f6e7db7b793920d3b90d341c766d95421e401.exe