Analysis
- max time kernel
148s - max time network
116s - platform
windows10-2004_x64 - resource
win10v2004-20240221-en - resource tags
arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system - submitted
24/02/2024, 13:27
Behavioral task
behavioral1
Sample
a1f6cd3f76105ff25444644af4675bcf.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a1f6cd3f76105ff25444644af4675bcf.exe
Resource
win10v2004-20240221-en
1 signatures
150 seconds
General
- Target a1f6cd3f76105ff25444644af4675bcf.exe
- Size 26KB
- Sample240224-qqbfaach73
- SHA256 2bf1f2bf24c19a93398cd69bdfb3f56c7d8650f4eee34de7d20878ec5231b178
- MD5 a1f6cd3f76105ff25444644af4675bcf
- SHA1 171a9f7f813299bc8538836fc19dbb0f0cc5bb9e
- SHA512 b70d144d6b36bd463cc10a87dd59fd560adbdbb88cc27710f3e4c0d78e51f92b2d2129fbeb236c2d25645dec226689ecf6a43d4b2fef87888b878b00dcf2ec6e
- SSDEEP 384:bgVaSIerM4v6nnxcG3avv67IcMyMHcjNQ1VXFHdI:b/eI/xv3avA5DMI
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 13 IoCs
description pid Process Token: SeDebugPrivilege 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: 33 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: SeIncBasePriorityPrivilege 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: 33 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: SeIncBasePriorityPrivilege 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: 33 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: SeIncBasePriorityPrivilege 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: 33 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: SeIncBasePriorityPrivilege 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: 33 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: SeIncBasePriorityPrivilege 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: 33 2356 a1f6cd3f76105ff25444644af4675bcf.exe Token: SeIncBasePriorityPrivilege 2356 a1f6cd3f76105ff25444644af4675bcf.exe