Analysis
-
max time kernel
7s -
max time network
0s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
29/12/2023, 19:49
Behavioral task
behavioral1
Sample
023fbbdbb45571840668ce9f1608c8b8.exe
Resource
win7-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
023fbbdbb45571840668ce9f1608c8b8.exe
Resource
win10v2004-20231222-en
1 signatures
150 seconds
Errors
Reason
Machine shutdown
General
-
Target
023fbbdbb45571840668ce9f1608c8b8.exe
-
Size
6KB
-
MD5
023fbbdbb45571840668ce9f1608c8b8
-
SHA1
7a1ce07cd9ea3b86c84296976fca358f1f2856cb
-
SHA256
4501fb9a48d8f9c35a3b18bf9ca44d03e1e5e9a312431c50e500eaa822e434cf
-
SHA512
fcc96191f06f679b7fad737006d2de7914d13b5bebe6b07cad1a8e847bede63ebcb9c7655ce429f33c73d3582446b37e5bd77151521546166b75c3018b07ebfa
-
SSDEEP
96:xzlMsuUkaMlooebso32sNwHvwS+VtVK/g9lVE+G/Q7YAgGeYo:xzoWiHvLAVKonFYrAgGW
Score
7/10
Malware Config
Signatures
-
resource yara_rule behavioral1/memory/1812-0-0x0000000000400000-0x0000000000408000-memory.dmp upx behavioral1/memory/1812-1-0x0000000000400000-0x0000000000408000-memory.dmp upx -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeShutdownPrivilege 1812 023fbbdbb45571840668ce9f1608c8b8.exe