Analysis
-
max time kernel
146s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
26-12-2023 15:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
78f59a1c639625eee5e0845fe68d34e0.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
78f59a1c639625eee5e0845fe68d34e0.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
78f59a1c639625eee5e0845fe68d34e0.exe
-
Size
44KB
-
MD5
78f59a1c639625eee5e0845fe68d34e0
-
SHA1
7162147bfbf4da781ae75cb88ca68df6187f5a5b
-
SHA256
38d2e347456afed0ef9f7691d4d60210706abdcf8e60a64e1e737074b3c59146
-
SHA512
9e0383239e3de5b3e25a4c49ae4dfff5d675160c12128ad0eb782ca5ce7c6819742921c9d7325be331b47e1c1a63b223db5ff3b5504386b486f3b02169cb16c2
-
SSDEEP
384:JuSXMBwzNTw8RPiRkpEaNQOXlWuBMosenkulvTtLbIaWTNm61bWHNeLm+HXg9:DVJTwQckW09x9lrtATNm8MNeKkg9
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 28 IoCs
description pid Process Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: 33 1948 78f59a1c639625eee5e0845fe68d34e0.exe Token: SeIncBasePriorityPrivilege 1948 78f59a1c639625eee5e0845fe68d34e0.exe -
Suspicious use of SetWindowsHookEx 2 IoCs
pid Process 1948 78f59a1c639625eee5e0845fe68d34e0.exe 1948 78f59a1c639625eee5e0845fe68d34e0.exe