Analysis
- max time kernel
150s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
12/10/2023, 15:19
Behavioral task
behavioral1
Sample
xf9FaSPBixkT.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
xf9FaSPBixkT.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target xf9FaSPBixkT.exe
- Size 32KB
- Sample231012-sqd8aaac48
- SHA256 410e999c7495976a0e968dcd03bba00202fd0bd5bfe60f679c0a8836ae5924ec
- MD5 a121c08b062c6ad1fe720bccaa16d3f9
- SHA1 3156f47845914bc3ddc09e0a5c7d675e7c555d02
- SHA512 124f6774a2b0ffd8643f2a95d1732b03d38e1cac484b03070896b141882563c8667601e6b64f989d6f2ebe5076da564f44942954ae743a8c51d0cd5d2c20ac73
- SSDEEP 384:r0bUe5XB4e0XLOfOliaXLilpknDPWTntTUFQqz9xObbt:IT9BuypaXWlx7bt
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe Token: 33 592 xf9FaSPBixkT.exe Token: SeIncBasePriorityPrivilege 592 xf9FaSPBixkT.exe