Analysis
-
max time kernel
165s -
max time network
180s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
31/12/2023, 01:07
Static task
static1
Behavioral task
behavioral1
Sample
a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe
Resource
win10v2004-20231215-en
General
-
Target
a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe
-
Size
36.1MB
-
MD5
1c5a2b27ce7e1a57e34dc5bf2311027f
-
SHA1
61645de7674c6660b4817b26caa3bb811f8a4541
-
SHA256
a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da
-
SHA512
c52372952402a37b4f378dd700e750303c9d6f80cf0a78d9b2cee8b9b2dfc5fbfa9a02b6567c3a189cedf2116f22ca956a5dc5f43c1d7c9a7eaf7d7acde060a1
-
SSDEEP
786432:OYEGPqe8GGFhGbej+RLIWtIrKOBCpwkbdQ+kj45icy:OpGyZrWU0tLNdQ34
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 5 IoCs
description pid Process Token: SeDebugPrivilege 5044 a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe Token: 33 5044 a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe Token: SeIncBasePriorityPrivilege 5044 a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe Token: 33 5044 a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe Token: SeIncBasePriorityPrivilege 5044 a0cf676291c17c0c316414df7369dbd8ce3f0f5825f843c496bffaf141bd34da.exe