Analysis
- max time kernel
148s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
06/02/2024, 17:06
Behavioral task
behavioral1
Sample
F180180F74A070444CE2C1EE425E5EB9.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
F180180F74A070444CE2C1EE425E5EB9.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target F180180F74A070444CE2C1EE425E5EB9.exe
- Size 32KB
- Sample240206-vmdtfsbfd7
- SHA256 c671155c2ff3529435a4facaabd8a06c6f5e559ff24763d6f387bc818c453727
- MD5 f180180f74a070444ce2c1ee425e5eb9
- SHA1 89ee67b66008297107f76b7e778d4db1a475d6af
- SHA512 df2c55d265933dd809e1ab644f66c88d7fe0058d05b66c78f0191712e48e610c75e89b99cdea8ef5e64a668ece8883751291f311a6909b3cbfb4e161afdf6dad
- SSDEEP 384:y0bUe5XB4e0X7OVbixBr/QGWTltTUFQqzF9AObbl:rT9BuC9ifrYlKHbl
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: 33 964 F180180F74A070444CE2C1EE425E5EB9.exe Token: SeIncBasePriorityPrivilege 964 F180180F74A070444CE2C1EE425E5EB9.exe