Analysis
- max time kernel
148s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20231222-en - resource tags
arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system - submitted
27/12/2023, 16:08
Behavioral task
behavioral1
Sample
bSB4.exe
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bSB4.exe
Resource
win10v2004-20231222-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bSB4.exe
- Size 32KB
- Sample231227-tk7s3sbhe7
- SHA256 d73b674e1bcd545b04f74778c20baa1e0687b1e3219efddaec0280d2b9216802
- MD5 6f63ae5040ffe8045c6b3f6efbbf5c3a
- SHA1 9fdd166560d0427ef770bbfdcb4c827d77abb616
- SHA512 4c2a7f1be7d62b851ff38d69119ad299e50a6e36524cab197c63b2b1704e029db18897568b24fa18d6bf015e9d6048252bed1b7baae4a8105551119e30bb9f08
- SSDEEP 384:t0bUe5XB4e0XWODzw0Q0mS03AWTxtTUFQqzFBMnObbV:+T9BuFY55dyjbV
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe Token: 33 4704 bSB4.exe Token: SeIncBasePriorityPrivilege 4704 bSB4.exe