Analysis
-
max time kernel
3s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20231127-en -
resource tags
arch:x64arch:x86image:win10v2004-20231127-enlocale:en-usos:windows10-2004-x64system -
submitted
08-12-2023 11:53
Behavioral task
behavioral1
Sample
b637f693b58e167ddfbacddbf1e4cd4bb0a06ed97466d587243dc79ccce546fd.exe
Resource
win7-20231023-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b637f693b58e167ddfbacddbf1e4cd4bb0a06ed97466d587243dc79ccce546fd.exe
Resource
win10v2004-20231127-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
b637f693b58e167ddfbacddbf1e4cd4bb0a06ed97466d587243dc79ccce546fd.exe
-
Size
1.7MB
-
MD5
b12fffc4854d787041748ce32e16b16a
-
SHA1
d38f925f90e8123312fa318ee0f017a438cd5531
-
SHA256
b637f693b58e167ddfbacddbf1e4cd4bb0a06ed97466d587243dc79ccce546fd
-
SHA512
50be724a46c7c317a60126fc6cc1f1a8fb0225a0ba3635f60a4addb25f0175330c6fd142132bdbade77f02605fc1b10d9b81f095249d7a83576c0243ead35704
-
SSDEEP
24576:PgCVxQ88/aBzMSVYj2Ksh7K99vu1w34RiYBd2DSVXT5XIb3nya:PgcQABz/VYj6+fvu1m8XT5XQn1
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2200 b637f693b58e167ddfbacddbf1e4cd4bb0a06ed97466d587243dc79ccce546fd.exe Token: SeDebugPrivilege 2200 b637f693b58e167ddfbacddbf1e4cd4bb0a06ed97466d587243dc79ccce546fd.exe