Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
21/09/2023, 08:29
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
P.O 2023-0394.exe
Resource
win7-20230831-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
P.O 2023-0394.exe
Resource
win10v2004-20230915-en
10 signatures
150 seconds
General
-
Target
P.O 2023-0394.exe
-
Size
605KB
-
MD5
e9d8fabac7efe04bbade84ce40cc95c6
-
SHA1
e500ec9deb793afe8c1c942b0e475e669d72df1e
-
SHA256
2f751e15e2155e4429bc738d59a7c612eb57959ed323d7acea1e36a4d8050738
-
SHA512
fb814b835f9a1fe4a148f7b61cdfa478ac9ff3f344fac5d8fe11c3f5b8d50a2bb6332198a04da3e6cf9b72492c0d4b6b2879179812ff243a699d99656cdabd12
-
SSDEEP
12288:Ze7cWH4V6Pmac4l5D+LtSN1y4JK0j3rMom7cdyRB+qo:Q7qkc4lYL4NIWKkTdiB+qo
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1692 P.O 2023-0394.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1692 P.O 2023-0394.exe