Analysis
-
max time kernel
145s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
26/12/2023, 10:30
Static task
static1
Behavioral task
behavioral1
Sample
676fd69f3192480227bc795d9ec8f003.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
676fd69f3192480227bc795d9ec8f003.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
676fd69f3192480227bc795d9ec8f003.exe
-
Size
8KB
-
MD5
676fd69f3192480227bc795d9ec8f003
-
SHA1
a2cd86c7715750ae2eb689f7020fc150975e64d7
-
SHA256
cb6b5a63c90426a9c227de78e44bffce431052db6da9c3dfd5b5eedf81667cf0
-
SHA512
c51083ddd5cc6de96b3115c804ca84aa5fb972b65781be5af2fb245da628eb54960381d6731cc7e1aa32c3dcf14c4527451bce0d97334175c58da0c14170e832
-
SSDEEP
192:SLn/piWqoHv441LJMvAqQvpEyncjWORteBIgKQdpk1bPlI:qBiWqOR1LWKnnKQo1be
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: LoadsDriver 46 IoCs
pid Process 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 660 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found 4 Process not Found -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 4380 676fd69f3192480227bc795d9ec8f003.exe