Analysis
-
max time kernel
150s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
16-02-2024 23:08
Behavioral task
behavioral1
Sample
bTAB.exe
Resource
win7-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bTAB.exe
Resource
win10v2004-20231215-en
1 signatures
150 seconds
General
-
Target
bTAB.exe
-
Size
32KB
-
MD5
f5c4ff3797506dc87d58a1e7f4e0d61c
-
SHA1
93730466a36aabdf872043c7af7bec8ac9f1c849
-
SHA256
73cb2cafa83f8eafefd85bd6bbed5d803f6457c1d622cb9617a8cdffc69ed14d
-
SHA512
6cc60e9d0e9be429010e55bb3090db84454c5c9ec73d89aafcac805ffaf37b6cdeda605081dc5e1f976e50130e820c63caa35f4453a10f758452704fab8bab91
-
SSDEEP
384:Z0bUe5XB4e0XfOViiaXLilpknD+WTCtTUFQqz9AObbA:iT9Bu2zaXWlRmbA
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
Processes:
bTAB.exedescription pid process Token: SeDebugPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe Token: 33 876 bTAB.exe Token: SeIncBasePriorityPrivilege 876 bTAB.exe