Analysis
- max time kernel
171s - max time network
171s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
14/10/2023, 02:23
Behavioral task
behavioral1
Sample
bPHF.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bPHF.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bPHF.exe
- Size 32KB
- Sample231014-cvmr8ade34
- SHA256 1a2c4455849c0b9c3b3b9a3babe3774b2cf2628ebaf8b10ea555d487b0f7ac93
- MD5 52884c1cab64fce4ebf6bac9dd66b0d4
- SHA1 6c764b9f987718bfbdc1be40593aaa7b93dedcf3
- SHA512 cbdccf6c2d3fb4501b88d20b55d24f2b62aafdd47157e684cde77c140aa705e981f03350375395f45cff06732d465d5b06f7a147de217ddbff89113e4023c1d4
- SSDEEP 384:x0bUe5XB4e0XiODzw0Q0mS03AWTxtTUFQqzF+ObbV:qT9BuBY55dYbV
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe Token: 33 456 bPHF.exe Token: SeIncBasePriorityPrivilege 456 bPHF.exe