Analysis
-
max time kernel
120s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
22/12/2023, 06:50
Static task
static1
Behavioral task
behavioral1
Sample
c3abe2f9df4bf667968121e3b41e2a9ac3a5a4b4431bcf6f63449d32c2eb4f21.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c3abe2f9df4bf667968121e3b41e2a9ac3a5a4b4431bcf6f63449d32c2eb4f21.exe
Resource
win10v2004-20231215-en
General
-
Target
c3abe2f9df4bf667968121e3b41e2a9ac3a5a4b4431bcf6f63449d32c2eb4f21.exe
-
Size
109KB
-
MD5
fa2fa06ee2775ee6aa313505a8ca863b
-
SHA1
c61102cf49347207baeedf47d0702a4b8710b09f
-
SHA256
c3abe2f9df4bf667968121e3b41e2a9ac3a5a4b4431bcf6f63449d32c2eb4f21
-
SHA512
c7f69728d113a11f5d8058afb4b31c5b398ddf6b4710f28ca10ef50c89c39ec21c3acb2868ff6ddaccc54e769ba4bf5483219493cd3a552703dbf50c6a354cbf
-
SSDEEP
1536:WC7yFyoMDrmpmjaRqHg+c6h6aOWd+bVgqx4Be64RPY5+TtngXNPoiuLHaojPQSXi:WZcyUa8uGdwPYATWXhoiuLHaOoSXi
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2252 c3abe2f9df4bf667968121e3b41e2a9ac3a5a4b4431bcf6f63449d32c2eb4f21.exe Token: SeTcbPrivilege 2252 c3abe2f9df4bf667968121e3b41e2a9ac3a5a4b4431bcf6f63449d32c2eb4f21.exe