Analysis
-
max time kernel
119s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
12-01-2024 08:31
Static task
static1
Behavioral task
behavioral1
Sample
3d49ba90dc5ff370e6b67210ff665d529501bb7c9da9ceebc91105bf5d6423b7.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
3d49ba90dc5ff370e6b67210ff665d529501bb7c9da9ceebc91105bf5d6423b7.exe
Resource
win10v2004-20231215-en
General
-
Target
3d49ba90dc5ff370e6b67210ff665d529501bb7c9da9ceebc91105bf5d6423b7.exe
-
Size
1.6MB
-
MD5
a1889d430a06eb43372a86389909d250
-
SHA1
ee66c88b2096477ca30ff7c614c035b161a81dba
-
SHA256
3d49ba90dc5ff370e6b67210ff665d529501bb7c9da9ceebc91105bf5d6423b7
-
SHA512
b9f9add5750458bd99caf9a26a749015526d844b1d493367d526d26f63a0d6302073a6ea430ad2265262c2fe47b6845b394f2a092cd416bc2d60c689b760fa5b
-
SSDEEP
12288:Kr9B+VaUMAdB8qr0zw9iXQ40AOzDr5YJjsF/5v3ZkHRik8:Kr9BFatr0zAiX90z/F0jsFB3SQk
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2520 3d49ba90dc5ff370e6b67210ff665d529501bb7c9da9ceebc91105bf5d6423b7.exe