Analysis
-
max time kernel
149s -
max time network
123s -
platform
windows7_x64 -
resource
win7-20231215-en -
resource tags
arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system -
submitted
03/02/2024, 19:07
Behavioral task
behavioral1
Sample
xlwuQNjwg68B.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
xlwuQNjwg68B.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
xlwuQNjwg68B.exe
-
Size
32KB
-
MD5
5c17105bc706c20a5f518b6865a2fa95
-
SHA1
d408c53ad763f176d21e309725b56e00d7ac1901
-
SHA256
a68a0d1275a071e01436ccdfa2746c3a6849a108c8c4797b12178c0d2d2a5769
-
SHA512
44f61ecada5c6aee7abcb095cf424f621f357e743ab1ae413517fac106a585310cbfb811cb987d0644af54e765684b042c2b3b990295fa40968bde31aa771a14
-
SSDEEP
384:t0bUe5XB4e0XeOllpiaXLilpknD0WTgtTUFQqz9OObbm:+T9Bu9lKaXWlpMbm
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe Token: 33 2188 xlwuQNjwg68B.exe Token: SeIncBasePriorityPrivilege 2188 xlwuQNjwg68B.exe