Analysis
-
max time kernel
122s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20230831-en -
resource tags
arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system -
submitted
12/10/2023, 14:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe
-
Size
2.2MB
-
MD5
e2d8e49d5594c4119298af816c87fa6d
-
SHA1
f80a5091d24d13c66cc1c7de0747bccad5e05ee6
-
SHA256
b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063
-
SHA512
0b96234fb0fbfa25f0429ba2355a4de93b97f9f092afba90b50f0ddb0353e187513194a952c9434e317b7af3a6be9b9e67872bcc1e0029f62dfbe9310a8fbff7
-
SSDEEP
49152:z+BlK3BA49/7xa+OpL+XCNDKXsrDSEQpB:K/KxAy/7Y+GEdX
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 49 IoCs
description pid Process Token: SeDebugPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 1 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeCreateTokenPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeAssignPrimaryTokenPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeLockMemoryPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeIncreaseQuotaPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeMachineAccountPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeTcbPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSecurityPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeTakeOwnershipPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeLoadDriverPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSystemProfilePrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSystemtimePrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeProfSingleProcessPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeIncBasePriorityPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeCreatePagefilePrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeCreatePermanentPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeBackupPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeRestorePrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeShutdownPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeDebugPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeAuditPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSystemEnvironmentPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeChangeNotifyPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeRemoteShutdownPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeUndockPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSyncAgentPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeEnableDelegationPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeManageVolumePrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeImpersonatePrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeCreateGlobalPrivilege 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 31 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 32 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 33 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 34 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 35 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 36 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 37 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 38 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 39 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 40 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 41 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 42 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 43 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 44 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 45 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 46 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 47 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 48 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe 2608 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe