Analysis
-
max time kernel
121s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231023-en -
resource tags
arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system -
submitted
06-11-2023 04:53
Static task
static1
Behavioral task
behavioral1
Sample
46304a29d2614764464359024e18491ab8423546564a2044eb875a3ead4c50a4.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
46304a29d2614764464359024e18491ab8423546564a2044eb875a3ead4c50a4.exe
Resource
win10-20231025-en
General
-
Target
46304a29d2614764464359024e18491ab8423546564a2044eb875a3ead4c50a4.exe
-
Size
2.7MB
-
MD5
b4f0180afbbf022e4d0f3d85c5e461ef
-
SHA1
7e1dc8d470ae08146eb8692095f22e6770c23728
-
SHA256
46304a29d2614764464359024e18491ab8423546564a2044eb875a3ead4c50a4
-
SHA512
141e7f327bf801f22d22b29f0a0c06ef5e858c148cc787a27bb06a5af991775a00033b1ee76b33f8b7e48dd54152f14c5eebb6958ed6733de7c0e6b5b5a715e6
-
SSDEEP
49152:kYGplgiQG6RQwyDb4Wgod8jlQPb9jON9EmH+g51+vz8AS9HJ6ctUByPG+SNwebJx:olkMLXCMJUT01P
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1164 46304a29d2614764464359024e18491ab8423546564a2044eb875a3ead4c50a4.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1164 46304a29d2614764464359024e18491ab8423546564a2044eb875a3ead4c50a4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\46304a29d2614764464359024e18491ab8423546564a2044eb875a3ead4c50a4.exe"C:\Users\Admin\AppData\Local\Temp\46304a29d2614764464359024e18491ab8423546564a2044eb875a3ead4c50a4.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1164