Analysis
-
max time kernel
145s -
max time network
151s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
05-10-2023 03:48
Static task
static1
Behavioral task
behavioral1
Sample
Inquiry Parts 2023-10.scr
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
Inquiry Parts 2023-10.scr
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
RFQ-1199211.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
RFQ-1199211.exe
Resource
win10v2004-20230915-en
General
-
Target
RFQ-1199211.exe
-
Size
768KB
-
MD5
21724c44495555e825f87cfc2b119bcf
-
SHA1
ea70f6fbebbb74a5c5b5b204136877b441f72da0
-
SHA256
8f86f0d30b96a4ffaf93e9726caefeaece8d3298534422fb5c5337ad8620ee59
-
SHA512
009c7fce795a64657244a7b581d58ed161360f29e4c8bdd5a5d6d395604d611f15504cefdb0944372aa0bb9f3a0d134bd4d869877c1e0c5d70efd2074a7a5d9a
-
SSDEEP
12288:fkXrDAYOu6LykBv6iWCj6SUptA8ghXDyQZE6+n889c4NcaiTWOo:fkfAQdkBj6S+GXmJGUcailo
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
RFQ-1199211.exedescription pid process Token: SeDebugPrivilege 2364 RFQ-1199211.exe