Analysis
- max time kernel
149s - max time network
157s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
22/01/2024, 02:34
Behavioral task
behavioral1
Sample
59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe
Resource
win7-20231129-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe
- Size 32KB
- Sample240122-c2d4nafaf4
- SHA256 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031
- MD5 93e12e74a8d5c47f02f1d11e2f952207
- SHA1 cd145a98bfdf5ecde16b27dc8f3956235d6b4b3f
- SHA512 ee3c072d290e11fcdf78fcebcb44fadeb3eadc99f3febabd0fc5d2032611aa00c0ae4e01c47ad299d65add2e00e3ffa66104a416429eede762ff830ab0b9582f
- SSDEEP 384:t0bUe5XB4e0XmO3fw0Q0mS03AWTxtTUFQqzFYObbJ:+T9Bu1o55d2bJ
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 33 IoCs
description pid Process Token: SeDebugPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: 33 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe Token: SeIncBasePriorityPrivilege 4004 59d681ed3c9edb0382a7fcd9ab62a78966ba532c21791a81f886db8808746031.exe