Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
25-02-2024 05:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
tmp.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp.exe
Resource
win10v2004-20240221-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
tmp.exe
-
Size
1.5MB
-
MD5
63c6a09fac52fe61d6cf3113b6e2f464
-
SHA1
e1ee58cdbe982d61424a18da5242206000bad6e4
-
SHA256
f592a5ed1882a7df9bee018c11cfef5b8939897d65fd143a3e1ecd286815b847
-
SHA512
83381429d1d43a516306d56731b6384c5c42b5ecde14e3c872bac286cf2a8dfbb7caa53e1198c630c600e805d801e0a8ccb3c6b959bddf6e371beb31b055c6ef
-
SSDEEP
24576:40wA6cTo8m+C5BrAGn53dPIEx49oMGZzLP7tdNrnKxNOVKSgF6wA6FToZm+C:40wA6cTo8m+C5B1ddv49tSzZLrn88V5D
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2000 tmp.exe