Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
11-03-2024 04:32
Static task
static1
Behavioral task
behavioral1
Sample
fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03.exe
Resource
win10v2004-20240226-en
General
-
Target
fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03.exe
-
Size
1.8MB
-
MD5
7ff1c9a6372c91dc4c4bdd80ab09aa13
-
SHA1
73179f2744c5ec6885dcaaf94884762801a46d58
-
SHA256
fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03
-
SHA512
d7c698c48b92972aea38ad23d896a399e1854afcac254549193db267d66424dff0ccf7c6c54a8a12b589e7b275a342448990ba268554dba9381f37074da1c262
-
SSDEEP
49152:BcV+ajoJaeh/XDgUQhia5Gv2h4SFFJLKhepWY:BH8k5TgV/5GvXStLKh
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1796 fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1796 fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03.exe"C:\Users\Admin\AppData\Local\Temp\fbd0d579f705f2140165b9c862631c0b93fb5b5a77087db2c4704a2abf36eb03.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1796