Analysis
-
max time kernel
45s -
max time network
47s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
11/03/2024, 19:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Windows-KB2670838.msu.exe
Resource
win10v2004-20240226-en
1 signatures
300 seconds
General
-
Target
Windows-KB2670838.msu.exe
-
Size
728KB
-
MD5
6e49c75f701aa059fa6ed5859650b910
-
SHA1
ccb7898c509c3a1de96d2010d638f6a719f6f400
-
SHA256
f91f02fd27ada64f36f6df59a611fef106ff7734833dea825d0612e73bdfb621
-
SHA512
ccd1b581a29de52d2313a97eb3c3b32b223dba1e7a49c83f7774b374bc2d16b13fba9566de6762883f3b64ed8e80327b454e5d32392af2a032c22653fed0fff8
-
SSDEEP
12288:5P/dTi0RF8dlFepPB0RF8dlFodTqPtoUBJMlANI/:5P/QBCpZB0iv8ld/
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3836 Windows-KB2670838.msu.exe Token: SeDebugPrivilege 3836 Windows-KB2670838.msu.exe