Analysis
-
max time kernel
143s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
12-10-2023 14:21
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe
Resource
win7-20230831-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe
-
Size
2.2MB
-
MD5
e2d8e49d5594c4119298af816c87fa6d
-
SHA1
f80a5091d24d13c66cc1c7de0747bccad5e05ee6
-
SHA256
b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063
-
SHA512
0b96234fb0fbfa25f0429ba2355a4de93b97f9f092afba90b50f0ddb0353e187513194a952c9434e317b7af3a6be9b9e67872bcc1e0029f62dfbe9310a8fbff7
-
SSDEEP
49152:z+BlK3BA49/7xa+OpL+XCNDKXsrDSEQpB:K/KxAy/7Y+GEdX
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 49 IoCs
description pid Process Token: SeDebugPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 1 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeCreateTokenPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeAssignPrimaryTokenPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeLockMemoryPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeIncreaseQuotaPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeMachineAccountPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeTcbPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSecurityPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeTakeOwnershipPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeLoadDriverPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSystemProfilePrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSystemtimePrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeProfSingleProcessPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeIncBasePriorityPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeCreatePagefilePrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeCreatePermanentPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeBackupPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeRestorePrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeShutdownPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeDebugPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeAuditPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSystemEnvironmentPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeChangeNotifyPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeRemoteShutdownPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeUndockPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeSyncAgentPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeEnableDelegationPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeManageVolumePrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeImpersonatePrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: SeCreateGlobalPrivilege 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 31 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 32 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 33 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 34 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 35 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 36 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 37 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 38 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 39 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 40 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 41 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 42 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 43 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 44 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 45 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 46 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 47 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe Token: 48 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe 1640 b7145b712f5c5857b1ed4eace5f53325d13a86fa2c31cbd7e2631d40e1122063.exe