Analysis
- max time kernel
148s - max time network
145s - platform
windows10-2004_x64 - resource
win10v2004-20231130-en - resource tags
arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system - submitted
02/12/2023, 09:41
Behavioral task
behavioral1
Sample
d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe
Resource
win7-20231201-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe
Resource
win10v2004-20231130-en
1 signatures
150 seconds
General
- Target d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe
- Size 32KB
- Sample231202-ln4xlabf24
- SHA256 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89
- MD5 89e06e5b3a093d20cd0c0bfa56a09684
- SHA1 3f76a726034cf84d7dab3b0920afce4427c1638d
- SHA512 b849f3e6bf01a78f1be2443bbc555640c4baa87f22b2fdb60574b6efbb9d2111a4fd077102a70d94e280412ce3897b16f198d0efba340271d8c77adfd049c553
- SSDEEP 384:30bUe5XB4e0XjOnPw0Q0mS03iWTjtTUFQqzFoObbn:cT9Bu6I55Zmbn
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: 33 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe Token: SeIncBasePriorityPrivilege 4656 d7ba376e4fceabd41b3e9fe4a82f60919f793c74f10f8713ba2b0b74e7fe3e89.exe