Analysis
- max time kernel
264s - max time network
283s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
12/10/2023, 12:06
Behavioral task
behavioral1
Sample
x38kbgLd6bPu.exe
Resource
win7-20230831-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
x38kbgLd6bPu.exe
Resource
win10v2004-20230915-en
1 signatures
150 seconds
General
- Target x38kbgLd6bPu.exe
- Size 32KB
- Sample231012-n93mrsbc88
- SHA256 991ffd2fe1920b738ca00d2f828de831148717207836e251a127a32affaf09c4
- MD5 3ff59e9ee616d6294b561a99d8e67940
- SHA1 cd0ae3d6a1bd3d464ff48bf4c1240ccc5104496b
- SHA512 313dd453cbb3c4b97d95a3487b83da3e224732b54f52242b4c4617a1eea2018e049b39bac54c2dc4e3853a1bc8eb3cc94f7dc9870dcaf1f0fd6fc5e16f5fdcd1
- SSDEEP 384:60bUe5XB4e0XrOnPw0Q0mS03AWTxtTUFQqzFkObbZ:jT9BuSI55dmbZ
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 27 IoCs
description pid Process Token: SeDebugPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe Token: 33 4652 x38kbgLd6bPu.exe Token: SeIncBasePriorityPrivilege 4652 x38kbgLd6bPu.exe