Analysis
- max time kernel
151s - max time network
158s - platform
windows10-2004_x64 - resource
win10v2004-20231023-en - resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system - submitted
08/11/2023, 02:22
Behavioral task
behavioral1
Sample
5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe
Resource
win7-20231023-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe
- Size 32KB
- Sample231108-ctxwssdf85
- SHA256 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44
- MD5 84a63be283a33e794e2315b8f2c621a9
- SHA1 210c6a5aef55906ed2b0339f9ba661a50866ccc3
- SHA512 7bdd8c6c0ee9708d32f732e0aff1deed4a5d2141f9dec4de2171b7c626896952b94d57cd6e4a775f2c017fab7b618bfa813799fc1fcb0be577096e7f4e760fab
- SSDEEP 384:A0bUe5XB4e0XqOzDw0Q0mS03AWTxtTUFQqzF2Obbl:lT9BuZ455dcbl
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: 33 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe Token: SeIncBasePriorityPrivilege 3696 5ffec6ce889380ba59bb1b18adb5c95745cb7f8ea748bc3b90185eeba854fd44.exe