Analysis
-
max time kernel
132s -
max time network
165s -
platform
windows10-2004_x64 -
resource
win10v2004-20231023-en -
resource tags
arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system -
submitted
09-11-2023 01:57
Behavioral task
behavioral1
Sample
cf4763a34fd6fa5e6807f5334d2c3357c6b80376b4b9d241bdef0fad4b7582c6.exe
Resource
win7-20231020-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf4763a34fd6fa5e6807f5334d2c3357c6b80376b4b9d241bdef0fad4b7582c6.exe
Resource
win10v2004-20231023-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
cf4763a34fd6fa5e6807f5334d2c3357c6b80376b4b9d241bdef0fad4b7582c6.exe
-
Size
1.6MB
-
MD5
43a0692376ad8324983cf1f5223cb4d2
-
SHA1
d9d1d3cd415fbf911e288bc879b60e10f5052d8a
-
SHA256
cf4763a34fd6fa5e6807f5334d2c3357c6b80376b4b9d241bdef0fad4b7582c6
-
SHA512
06a25ede2db453962d42676f8ee565af21e9e0dd244f5377d37f8696682d8399183b7702e8890468f2378404d53df258cf067c889f3e92d130a3cb8c42c7e3c8
-
SSDEEP
49152:H7iNqiFNFmD3GnXG0QdQ8/XT5XfPPNg1w4:+JFHmDvv/D5HPC17
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4252 cf4763a34fd6fa5e6807f5334d2c3357c6b80376b4b9d241bdef0fad4b7582c6.exe Token: SeDebugPrivilege 4252 cf4763a34fd6fa5e6807f5334d2c3357c6b80376b4b9d241bdef0fad4b7582c6.exe