Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240220-en -
resource tags
arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system -
submitted
04-04-2024 15:58
Static task
static1
Behavioral task
behavioral1
Sample
ad0a542690dfee8247f36093a986b706642a87b02997aea453982827b6fe4699.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
ad0a542690dfee8247f36093a986b706642a87b02997aea453982827b6fe4699.exe
Resource
win10v2004-20240226-en
General
-
Target
ad0a542690dfee8247f36093a986b706642a87b02997aea453982827b6fe4699.exe
-
Size
706KB
-
MD5
971a8884378271a6c7792dc198deeaa1
-
SHA1
bdaf01ae2ba87113271fe7aaa6431ff5b333e8cf
-
SHA256
ad0a542690dfee8247f36093a986b706642a87b02997aea453982827b6fe4699
-
SHA512
000ae4ec29955d4acec9352c96e8385f678dee18f45717322e82920171d8c5c6d754fa0935bbee7d5f213e4fa3adeb0ca10664d5e51b6a2015a21a57a9876a9d
-
SSDEEP
12288:UAiB+ttUBL8252uui8FbECP7BhdfswdJ0NXdU8ZWH7DEP1rCJ7U3T:UAiBct2rR8FfBhRJUEbDk1ulUD
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 840 ad0a542690dfee8247f36093a986b706642a87b02997aea453982827b6fe4699.exe