Analysis
-
max time kernel
150s -
max time network
153s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
11-10-2023 19:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Elocb.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Elocb.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
Elocb.exe
-
Size
542KB
-
MD5
b691256181f34d2e96e9e8bd0573b655
-
SHA1
3e473a3e61cd3b2f5b6e70598f1d064b16f31e67
-
SHA256
e2016c65f1ecf142c0b50f91a169c21812234462a048c6e2e0d10ea735d45094
-
SHA512
b5a8039500c5d806cc796ef03fad5a4b4954096e5c0100da7e692b9d7a3b8d0ddf1c4ebbc44aa590822d72e214d1f26c2cb7e50e2d5670673bb444ea9e25bb4f
-
SSDEEP
12288:9ht/vlfov3CVkHUTu+i8iwWpZo03BOeKLcdve:5vk8WpZL3ceKL8e
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2208 Elocb.exe