Analysis
- max time kernel
150s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
06/03/2024, 02:37
Behavioral task
behavioral1
Sample
1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe
- Size 48KB
- Sample240306-c4gbssac73
- SHA256 6214a54c2992eae1a43b9ebc84d3231b9e7f88c8ab669b1e92a413d03c6675dc
- MD5 1b0c45e30ae190702e90769b59dea9e0
- SHA1 6e3b27579842fa1afd99f9bba46ad97838aed131
- SHA512 e809338d704911efb4166e0375250ef211c7e58d3121583b0440f8ffb63080a25f49cb8c48d5de1dffa3fea60f17d0f1a381e65bddc8386e0185c51ecf8379b4
- SSDEEP 384:00bUe5XB4e0XmOD5IQgYbr9pNWT+tTUFQqz91Obbu:RT9Bu1dIQVbJnTbu
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: 33 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe Token: SeIncBasePriorityPrivilege 2768 1712-55-0x00000000007D0000-0x00000000007DC000-memory.exe