Analysis
-
max time kernel
103s -
max time network
166s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
25-10-2023 16:24
Behavioral task
behavioral1
Sample
6db80e5b997f46e6293e7501774cfb3c8e4c16cdeaecabbd3f865b18cc585878.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
6db80e5b997f46e6293e7501774cfb3c8e4c16cdeaecabbd3f865b18cc585878.exe
Resource
win10v2004-20231023-en
General
-
Target
6db80e5b997f46e6293e7501774cfb3c8e4c16cdeaecabbd3f865b18cc585878.exe
-
Size
1.9MB
-
MD5
dc94170d52cc35913e487bbc517996f1
-
SHA1
462d7ae2a3b8db99a7da66a152b3ff7cba1f9a09
-
SHA256
6db80e5b997f46e6293e7501774cfb3c8e4c16cdeaecabbd3f865b18cc585878
-
SHA512
e88e2b178b3bb9e18e1826dd029b487a2d573551a31e93e7eea6e5ba3822002d3329c19bf92a95e658441b7dfa624fb9598542ce4e5d37e73772ce84d0a99aee
-
SSDEEP
24576:yktHJSLLbT1Gv6QC34VCNkag5LyBTm0Eh0lhSMXlbg61h3C3eLPDSVXT5X2EPRtW:ztHYNGBC344Nkawy9XH1IuYXT5XH01
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3348 6db80e5b997f46e6293e7501774cfb3c8e4c16cdeaecabbd3f865b18cc585878.exe Token: SeDebugPrivilege 3348 6db80e5b997f46e6293e7501774cfb3c8e4c16cdeaecabbd3f865b18cc585878.exe