Analysis
-
max time kernel
121s -
max time network
131s -
platform
windows7_x64 -
resource
win7-20231020-en -
resource tags
arch:x64arch:x86image:win7-20231020-enlocale:en-usos:windows7-x64system -
submitted
17/11/2023, 05:38
Static task
static1
Behavioral task
behavioral1
Sample
f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe
Resource
win10v2004-20231023-en
General
-
Target
f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe
-
Size
3.0MB
-
MD5
3bdb9667406bca74491d45d3da84f16f
-
SHA1
93eb5471f3f9b9099a6a0bd4ab87388d9d4eaed3
-
SHA256
f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467
-
SHA512
03ac3ecb90434d30d7d4408893a6f8fcde9bca23c150e075b0c875e9ad61257b43cb6aff91cd913a7a848ddc72404d0c2433f3971952f11d0c2e098f5e513794
-
SSDEEP
49152:ezTkG6XFclG4r3M4jEGk23KmdiBtB/BltB/BttB/BnztB/Be:C4G6XFclG4r3ljCNm+tB5ltB5ttB5ztK
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2196 f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe -
Suspicious use of SetWindowsHookEx 5 IoCs
pid Process 2196 f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe 2196 f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe 2196 f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe 2196 f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe 2196 f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe"C:\Users\Admin\AppData\Local\Temp\f47529d08d1be7fbfc88bd08003c1cb2d049b6d75714d2dd0c4e9b26251e3467.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:2196