Analysis
-
max time kernel
149s -
max time network
152s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
30/10/2023, 20:21
Behavioral task
behavioral1
Sample
5FC70604B15FE5B409DF04BCDC78DF15.exe
Resource
win7-20231023-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5FC70604B15FE5B409DF04BCDC78DF15.exe
Resource
win10v2004-20231020-en
2 signatures
150 seconds
General
-
Target
5FC70604B15FE5B409DF04BCDC78DF15.exe
-
Size
32KB
-
MD5
5fc70604b15fe5b409df04bcdc78df15
-
SHA1
8c8218c524966f2a54132598c7cc67ac29563224
-
SHA256
fb3d2abb360e3dc74ee3646ced736247b25c2ead6e2e0f9776565998060bb325
-
SHA512
c9a30abb5064d0c08a1e7dcfbe2911d179d050bdd6e13bc6e351eca289fbdeb43d29ec2ac0ecbbfb643b9c3de4c17f225717f6c49f0ce6fdbe1f1e4355e40c2d
-
SSDEEP
384:E0bUe5XB4e0XZOnPw0Q0mS03AWTxtTUFQqzFaObbZ:BT9BuAI55dEbZ
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: 33 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe Token: SeIncBasePriorityPrivilege 2108 5FC70604B15FE5B409DF04BCDC78DF15.exe