Analysis
-
max time kernel
213s -
max time network
234s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
13/10/2023, 03:15
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
3 signatures
150 seconds
General
-
Target
cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe
-
Size
1.4MB
-
MD5
785a7380e51d60e9f62dfc4e00e86a17
-
SHA1
b9e1f49231f169e489cf973576a47cf60f872179
-
SHA256
cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df
-
SHA512
79661c9dbf81f754e526542cb7f287ed8bab6e0a4b954955ba51701622da945e1dfa9cc858b9c19e94ce618d277d4b38785528433ff3ed91bdec65a763bc00cd
-
SSDEEP
24576:MbS/xVAQLLJr4wSqftjM2UqGWojaHDzLyAe8N8gZQ4ZxolTF:M5QLLJr4M1GWhDzG/hujeT
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: 33 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe Token: SeIncBasePriorityPrivilege 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe 4588 cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe"C:\Users\Admin\AppData\Local\Temp\cd13e56b3332c552595b73052a031dc0add58d72772fbbfe10f40817789731df.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:4588