33b311de8af4ec8d35462fffab89350f7d08277bcc98dda6fb148eff8cc36884 | Triage

Analysis

max time kernel
40s
max time network
52s
platform
windows7_x64
resource
win7-20231215-de
resource tags

arch:x64arch:x86image:win7-20231215-delocale:de-deos:windows7-x64systemwindows
submitted
18-01-2024 20:17

Sharing

Report Analysis Logs

General

Target

IDA Pro/dbgsrv/win64_remote64.exe
Size

804KB
MD5

9613938952c5e2991063309982f2ae58
SHA1

aae4c44ec35960f3729142e0b64edac445d29227
SHA256

bf229ad6affcd486910c5654e777dc586f7e806d14b1d6613e03dde26359f2cf
SHA512

9bc1a6b96d577bf7d5b9157ebf64f281326440a2d9dd678205e446b6af81db9bcfb96f6c86e30c37bef683544743953d8ee46f89a3fbaf9f18cc94579c2ad8a5
SSDEEP

24576:RDe8PcYcOoDekAMNHFZ5AXxu8PcXroThr0:JvXvMHFZmXoa+oT

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

win64_remote64.exe

description pid process

Token: SeDebugPrivilege 2552 win64_remote64.exe

C:\Users\Admin\AppData\Local\Temp\IDA Pro\dbgsrv\win64_remote64.exe
"C:\Users\Admin\AppData\Local\Temp\IDA Pro\dbgsrv\win64_remote64.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2552

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads