Analysis
- max time kernel
150s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20231127-en - resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system - submitted
05/12/2023, 18:10
Behavioral task
behavioral1
Sample
bSk3.exe
Resource
win7-20231023-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bSk3.exe
Resource
win10v2004-20231127-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bSk3.exe
- Size 32KB
- Sample231205-wsfqnsdf91
- SHA256 b9cdf70b71fa9f216dd7ad40d77d893ba095059d6f3beb7c4ed9bc5cb46ce784
- MD5 43c6715b30ae988dc4335018d5b507c7
- SHA1 2f99315cb771375627ec2fbb07ef738d9f40572e
- SHA512 0bb71898e3602c1a7f854ddbf6434dc3e79dbb9657e4b162b8b60cd774aa943badb5f5e9268a98dc91dc29b25bf6a1986501dba29c6b2aca77dcb018280ddfa8
- SSDEEP 384:++0bUe5XB4e0XeOZzw0Q0mS03AWTxtTUFQqzFjObbV:+vT9Bu9C55dBbV
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe Token: 33 3488 bSk3.exe Token: SeIncBasePriorityPrivilege 3488 bSk3.exe