Analysis
-
max time kernel
0s -
max time network
67s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 07:31
Behavioral task
behavioral1
Sample
49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5.exe
-
Size
1.4MB
-
MD5
e36614455f58a676dbae883550e6f5bd
-
SHA1
25bba6efec294ac6aa44e3440ba2499804a9b422
-
SHA256
49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5
-
SHA512
21f35168bc37faad422e0c53ae44ecf20a10b8233cb34a4acd0de72be2838a3371a5abe07308e8ffb99bc8c70437eec3e597aee623fca081b79dbab372cfdd48
-
SSDEEP
24576:V05uhGZyuA2J20bTlO/WTyWo3LaDuyawx44DSVXT5Xepp:maGU0JRbpOUcLay1E49XT5Xepp
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3168 49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5.exe Token: SeDebugPrivilege 3168 49c92864b8fbd7ba28da801d0298a029fc832d454c445ba4ced12faddd0f65a5.exe