Analysis
- max time kernel
150s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
10/02/2024, 00:08
Behavioral task
behavioral1
Sample
bT2W.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bT2W.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bT2W.exe
- Size 32KB
- Sample240210-aewdbahb89
- SHA256 3584010af4c61f06ddedbc2d740c5c787ac08e62e00f6ec267cd73baef3b21f4
- MD5 560258045e1fd3080bf52e895fde2560
- SHA1 a1acc7bb8e0ac62ed79ca9a1645e2f80c66e68e4
- SHA512 a16533ce8b451082df45c02eeedc8838dfce0d6b38c0e3bf8f3488e192f6942786060a6ddffb80c22edbfe75c4d67f74e0f91ae8c7e24633c9ff063ffe8e0667
- SSDEEP 384:V0bUe5XB4e0XppOjfmiaXLilpknDEWTItTUFQqz9uObb6:2T9BuGjtaXWlhkb6
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe Token: 33 4480 bT2W.exe Token: SeIncBasePriorityPrivilege 4480 bT2W.exe