Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
10/03/2024, 23:08
Behavioral task
behavioral1
Sample
bUb8.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bUb8.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bUb8.exe
- Size 32KB
- Sample240310-24h8tsdf64
- SHA256 8f21cc5b66c620a939e64945799b90330b3a1a9e2b915e1293ca118a4e504d56
- MD5 2c44baac02534abaa00696f649c2792f
- SHA1 58f6eba650cdfa331cf0cdf829b0f927080d153f
- SHA512 b960960bf17ec7b47cde68c297874efe2b06ffa43f346bbc326b6ab66800017be0e42e911e18ea9b757f6db716a231c5cd86a18d9c1f8b121d56cd36177ce9c0
- SSDEEP 384:R0bUe5XB4e0XOOZ9Qq1pvmufCsIs0WTQtTUFQqz91ObbS:KT9BuN/Qqvvmu6dTbS
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe Token: 33 440 bUb8.exe Token: SeIncBasePriorityPrivilege 440 bUb8.exe