Analysis
-
max time kernel
131s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
09-11-2023 01:53
Behavioral task
behavioral1
Sample
b15afb145448344701a010445c1a13996ae6853fdcd8ae8441ff2eca4121429e.exe
Resource
win7-20231020-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
b15afb145448344701a010445c1a13996ae6853fdcd8ae8441ff2eca4121429e.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b15afb145448344701a010445c1a13996ae6853fdcd8ae8441ff2eca4121429e.exe
-
Size
2.0MB
-
MD5
e65de105c926f0f02b8828ebe637a9c0
-
SHA1
9e2c0e23afdd28915317fa78904da5eaad42f218
-
SHA256
b15afb145448344701a010445c1a13996ae6853fdcd8ae8441ff2eca4121429e
-
SHA512
ecd350fbec8c61d1baaebb02a879bde4061c22ecfd38f10356b363967989fa68d4c41c75d0b7996ef3a631dc66c3056a92362258397b2735d1d65085128740f0
-
SSDEEP
49152:Zm4u8b06GS37cXDztS/zepXT5XNyLgO1:L8TztxD5k8O1
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 5064 b15afb145448344701a010445c1a13996ae6853fdcd8ae8441ff2eca4121429e.exe Token: SeDebugPrivilege 5064 b15afb145448344701a010445c1a13996ae6853fdcd8ae8441ff2eca4121429e.exe