Analysis
-
max time kernel
140s -
max time network
177s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11-10-2023 07:49
Static task
static1
Behavioral task
behavioral1
Sample
NEW ORDER FILE.bat
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEW ORDER FILE.bat
Resource
win10v2004-20230915-en
Behavioral task
behavioral3
Sample
NEW ORDER FILE1.exe
Resource
win7-20230831-en
Behavioral task
behavioral4
Sample
NEW ORDER FILE1.exe
Resource
win10v2004-20230915-en
General
-
Target
NEW ORDER FILE1.exe
-
Size
370KB
-
MD5
e605ce827ace0aa2cc096965597c0a45
-
SHA1
0d34649e1c4ca83e9e5ce57648e4b4fd0ae05689
-
SHA256
625baa4a239a4b0a094ae64b2db0a37ef800ba6cd469728dcf86cb3c0f53f9cc
-
SHA512
4a3672c5e5dfd8d540a73202cc66e849ab15561215d617e790906bf3abb16538bdf09cab973b54f654abf3cb2ecec1a0c82d1e4d4bb6a5fdf8e9f6cd8a3d280b
-
SSDEEP
6144:pIkPdJwXW1D6ShqSxDj4tVw80oa/Vzp5Yo2jNvg0HKBzbsBhf5:pAsxDj4X/ux0NUU5
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2344 NEW ORDER FILE1.exe