Analysis
-
max time kernel
139s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
03-11-2023 11:35
Static task
static1
Behavioral task
behavioral1
Sample
b2da4f36ead1b8678b0390e81af0b55b0681776ff272e0250545fc0a0f074bec.exe
Resource
win7-20231025-en
Behavioral task
behavioral2
Sample
b2da4f36ead1b8678b0390e81af0b55b0681776ff272e0250545fc0a0f074bec.exe
Resource
win10v2004-20231023-en
General
-
Target
b2da4f36ead1b8678b0390e81af0b55b0681776ff272e0250545fc0a0f074bec.exe
-
Size
340KB
-
MD5
51f6118768817fc6e37caa27d54199c4
-
SHA1
9d0052c2a2c1b001d65872e91c34b85c5f01808d
-
SHA256
b2da4f36ead1b8678b0390e81af0b55b0681776ff272e0250545fc0a0f074bec
-
SHA512
20fafa0b09d00cbccd4bfad13f4b595cca49dc1e6dfbd476f5d61e5bcb99415d46e7a263a2ebd43bffa829ef6d36182094ffef21b29518cbf7b1343675154251
-
SSDEEP
6144:8NwwX8Ok1yGNiWH4Tk6oYaFogQHzMVieJvqhaV5aQWMyvT0n1:8NfFk1TNfHwnoYZgkWNqhk5aQWMyC
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1404 b2da4f36ead1b8678b0390e81af0b55b0681776ff272e0250545fc0a0f074bec.exe