Analysis
- max time kernel
86s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20231025-en - resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system - submitted
04/11/2023, 17:40
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe
Resource
win7-20231020-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe
Resource
win10v2004-20231025-en
windows10-2004-x64
3 signatures
150 seconds
General
- Target ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe
- Size 1.6MB
- Sample231104-v88kyseh64
- SHA256 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d
- MD5 3d3bf7838c7f0301ec7184c288a0b99e
- SHA1 3f2ef47ac5de546318c77034da13e662891fb30c
- SHA512 0e3dbd7018d2c02d9c64759d4c6b9e864f01deed91077cc63935faba54183c137c554e91cf1d8642eed4ee8646bb0730e7f39ba59f0f4cb62d439f1c59f4bb97
- SSDEEP 49152:slHsWkaFZjCDN3A2rHLDokWwoaKl5XeYDhETk7/p0w:msWkaFZjCDN3A2HKPXeYDuI7/1
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: 33 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe Token: SeIncBasePriorityPrivilege 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe - Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe 2876 ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe"C:\Users\Admin\AppData\Local\Temp\ce1007392750b5367402c4fba076bfa340bb0f2b50e240843aa426ba6565911d.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2876