Analysis
-
max time kernel
152s -
max time network
174s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
07-11-2023 14:50
Behavioral task
behavioral1
Sample
Activator/ConsoleAct_2.3.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
Activator/ConsoleAct_2.3.exe
Resource
win10v2004-20231023-en
Behavioral task
behavioral3
Sample
Activator/Microsoft_Toolkit_2.6.4.exe
Resource
win7-20231023-en
Behavioral task
behavioral4
Sample
Activator/Microsoft_Toolkit_2.6.4.exe
Resource
win10v2004-20231020-en
Behavioral task
behavioral5
Sample
Activator/W10_Digital_Activation_1.3.7.exe
Resource
win7-20231023-en
Behavioral task
behavioral6
Sample
Activator/W10_Digital_Activation_1.3.7.exe
Resource
win10v2004-20231020-en
General
-
Target
Activator/Microsoft_Toolkit_2.6.4.exe
-
Size
56.5MB
-
MD5
d77b38f887a7d6b842d05ada38a57bcc
-
SHA1
2b6d05f9cde75049414433994ab5482c2795086d
-
SHA256
99130c7385dfa35d791c21c678d1bafc009284b345261eebfeacc3baf11b1bc9
-
SHA512
78e8a25c5442d6619d8de81a39bcf3307acaaecb7d52aa6b2e0c24fa7b8d5897957d8bc3f4e54cb2391d3019ee203bd2e08121c852ed2c6bea4531af86a02870
-
SSDEEP
1572864:jbRSRkZ58dTKOx+GdgLf9GmEdfoe3Qr1BXhN8Jzy1n:jbRZHGd/4bizqn
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 29 IoCs
description pid Process Token: SeDebugPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe Token: 33 3180 Microsoft_Toolkit_2.6.4.exe Token: SeIncBasePriorityPrivilege 3180 Microsoft_Toolkit_2.6.4.exe