Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31/12/2023, 01:40
Static task
static1
Behavioral task
behavioral1
Sample
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe
Resource
win10v2004-20231222-en
General
-
Target
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe
-
Size
1.1MB
-
MD5
fca2aa6d8039dd107aff1a3cfbe97f7b
-
SHA1
7d47eb1ec59c3381ced53af2afe4a5c14cdf86f5
-
SHA256
78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f
-
SHA512
f3ccce78945455536ac6f077ea15b49a73f560043dcf47a054f749e389df2e9b8fbab7ac5008e0971b7b8489d359fe2e9f96bc54ed57cfaa94b703cfc3d148be
-
SSDEEP
24576:VTRqE2rb1UKApqrqI9PGi0gf0zQn8qqROJH40UdSX4ovytII6:VTr0b13ApqrqI9PORO8qLYN3UI6
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeDebugPrivilege 2628 78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe Token: 33 2628 78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe Token: SeIncBasePriorityPrivilege 2628 78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe Token: 33 2628 78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe Token: SeIncBasePriorityPrivilege 2628 78729c8e1d3dcc6c70445016e36eb07d79d87033eb124598363038b7d001769f.exe