Analysis
-
max time kernel
147s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
01-01-2024 09:46
Behavioral task
behavioral1
Sample
ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070.exe
Resource
win7-20231215-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070.exe
-
Size
1.3MB
-
MD5
04987587e8f891e823ca06ede62e454a
-
SHA1
7d74167f4f3b63e26f104756e3d19984bac84302
-
SHA256
ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070
-
SHA512
23f42ae9725046de089217f1339ac5453c5faa2238c7794321de9ebacf22d0ecec9e2d433e9c216bcd04dab4fd688ec8c57c0be34b8b810841f73edd0f8f46a8
-
SSDEEP
24576:X6xN+8MWt5Qogm3rtNjR01iSGGvuBa4pyakDSVXT5X0vhA:X6g8MWt5Q3m3rtui3wuE4p1pXT5X0v2
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3488 ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070.exe Token: SeDebugPrivilege 3488 ef534c72b800286824af370f3b98c75120a55d87b65e2bffba8d2ba0ab32a070.exe