Analysis
- max time kernel
148s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
28/01/2024, 14:06
Behavioral task
behavioral1
Sample
5552191A1007830D69046DA031139AEE.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
5552191A1007830D69046DA031139AEE.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 5552191A1007830D69046DA031139AEE.exe
- Size 32KB
- Sample240128-redlyabha8
- SHA256 3dac681c089267ae9efc5397f51647c1183b249d6dc82101f3ea737f186a1ee8
- MD5 5552191a1007830d69046da031139aee
- SHA1 f57b2decc8334de93479d0e548ec2244e3081d89
- SHA512 463ce3655f9cfe5d2eae2baaaa7b180f0d3b3db130d1cd72471ef57696ac617f405c749f01ac15f85902200383c9f560cf736afc6bde4639480810898b647a4a
- SSDEEP 384:/0bUe5XB4e0XyOpJIQgYbr9pmWTttTUFQqz9KObbL:0T9BuxPIQVbJTEbL
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 35 IoCs
description pid Process Token: SeDebugPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe Token: 33 3148 5552191A1007830D69046DA031139AEE.exe Token: SeIncBasePriorityPrivilege 3148 5552191A1007830D69046DA031139AEE.exe