Analysis
- max time kernel
182s - max time network
185s - platform
windows10-2004_x64 - resource
win10v2004-20231020-en - resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system - submitted
11/11/2023, 03:42
Behavioral task
behavioral1
Sample
envios.exe
Resource
win7-20231020-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
envios.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target envios.exe
- Size 32KB
- Sample231111-d9tpraab53
- SHA256 94d51859abd941ac9e01cb022ebfba52e2578af518ef4c6782fbea5cdc5d24f9
- MD5 135be656f10bc1d98dbd1aeabcdbae4e
- SHA1 463dee7df168920431f50907d38089ea4086da5f
- SHA512 6a3d13d64efc9523907ab753b17831924c4bd532e8b4d204b352924c816875e1c4dc78d4b174d5fe2e89b85c15fadcf817f35c0e95b494c1fd8962e8debcea50
- SSDEEP 384:g0bUe5XB4e0XspOjfrw0Q0mS037WTatTUFQqzF0ObbK:FT9Bu9j855/KbK
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe Token: 33 1844 envios.exe Token: SeIncBasePriorityPrivilege 1844 envios.exe