Analysis
-
max time kernel
141s -
max time network
140s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
31-10-2023 13:55
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe
Resource
win7-20231020-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe
-
Size
796KB
-
MD5
de84e870fbf45947fb8b2a7f6c348d48
-
SHA1
2f898086eb495a3dc91036682b8db6aa5a5ec290
-
SHA256
88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132
-
SHA512
4cf4fd7de69f6cbaaacc4fcd2d13a36f6d32b4437ee493c8795f62ffdb9157be3879984e082080f01d5858774282f8a2d0c4c97e7d0b775df8e63c204e7786a4
-
SSDEEP
24576:fF1rcwk/1afoFa7m1uWDuWREBAzae7E7WmArVA5oYD:32Jem15EBAz
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2660 88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe -
Suspicious use of AdjustPrivilegeToken 3 IoCs
description pid Process Token: SeBackupPrivilege 2660 88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe Token: SeRestorePrivilege 2660 88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe Token: SeShutdownPrivilege 2660 88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe"C:\Users\Admin\AppData\Local\Temp\88543bd276a1d18cf901d54a305cdb330446c453d08f770565b312d88d097132.exe"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
PID:2660