Analysis
- max time kernel
182s - max time network
192s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
14/10/2023, 02:23
Behavioral task
behavioral1
Sample
bPHL.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bPHL.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bPHL.exe
- Size 32KB
- Sample231014-cvmr8ade35
- SHA256 71aeacef3a99e2b7af179a22756e00a03a610a8cf612bce2ed729c4067fb119f
- MD5 95c33f809c42134af6b3d546c7aa98d6
- SHA1 63e6b48ff74971f196d7dc28f2e2507c96ab70b3
- SHA512 9e996eb580e7bc9a641a99464614feacf65aba8d94bb00eff309ffdabdf51c9f1a2c59f7109f056af53c967e673bbcdabe36e7eb62050bb1ccdd8abfa26157b0
- SSDEEP 384:00bUe5XB4e0XSOfOLsw0Q0mS03AWTxtTUFQqzFLObbR:RT9BuRk555dNbR
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 31 IoCs
description pid Process Token: SeDebugPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe Token: 33 1708 bPHL.exe Token: SeIncBasePriorityPrivilege 1708 bPHL.exe