Analysis
-
max time kernel
159s -
max time network
164s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 21:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe
Resource
win7-20230831-en
windows7-x64
4 signatures
150 seconds
General
-
Target
491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe
-
Size
26KB
-
MD5
8ae7f841045aed1f381a68caa736d94b
-
SHA1
8a4402abc3764dddbf0944da5bbf6e74394a6095
-
SHA256
491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0
-
SHA512
df25354666c46035552cdd60fbd90ea2ce57266782355a7ccb27da9600fd0ca1535f140da0fc6249d1ebd99dca7398173f59a52d24776a1c6286a2e94718b8cd
-
SSDEEP
384:vLd6cufEYAA/XgWeyoHzCYe/iBY2OzRLTm3yilqr63+bJtVvGD:Dl8AA/6T5e/gsEsVvGD
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: SeIncBasePriorityPrivilege 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe Token: 33 4256 491b1dfe9c3d8d0687339c3b12e07529d515f4bbaaa6c8def22032f223452bb0_JC.exe