Analysis
- max time kernel
149s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
13/02/2024, 13:09
Behavioral task
behavioral1
Sample
bT6q.exe
Resource
win7-20231215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bT6q.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bT6q.exe
- Size 32KB
- Sample240213-qdr79sbh27
- SHA256 1033deb03fd79ce8fcd5908e9530d4cde4c3743685787a831e22c148487bb719
- MD5 61c272a9360a04c49a20c70539ee7d6b
- SHA1 9d044d975232827e20d8b540b20938f4d81d3572
- SHA512 6c56718d31cf756a218db24688d7fe2b5f4b7c0c7899fd9335caa79934c8ec14763d9166b6a50bfde1c01087759796aef9f41168d0907a0074c45fabf35f675d
- SSDEEP 384:N0bUe5XB4e0X7OxZggUBZIGjWTvtTUFQqzFDObbZ:eT9BuCzggUBZId9bZ
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe Token: 33 4960 bT6q.exe Token: SeIncBasePriorityPrivilege 4960 bT6q.exe