Analysis
-
max time kernel
150s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
31-12-2023 12:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
36da5fb7d36252b40e344840e9485388.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
36da5fb7d36252b40e344840e9485388.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
36da5fb7d36252b40e344840e9485388.exe
-
Size
298KB
-
MD5
36da5fb7d36252b40e344840e9485388
-
SHA1
c9baa883fdb22261a3bbe9430bba16819441dc58
-
SHA256
6913c031a7a6760f9e3e4b33e9af78f8356560ad226c63d38e27bc5ee000d04d
-
SHA512
32f51482ab567c839e89ecdcc006f0f3719b0c42eaeac603b9a47e3d7595f3d0069efed9738be0b2c0e0e782c190f8beb763dd8eacc658e74286211f057c5843
-
SSDEEP
3072:QlmYSgrFEeArrX8VF0vaF7yeCWfeEPSFi3ymbUgoi1g4r8iShjoAGO89D8BGhkw:6SgrFeMMChCIPx2Y8bhhp8zkw
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe 3032 36da5fb7d36252b40e344840e9485388.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: 33 3032 36da5fb7d36252b40e344840e9485388.exe Token: SeIncBasePriorityPrivilege 3032 36da5fb7d36252b40e344840e9485388.exe