Analysis
- max time kernel
148s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
06/04/2024, 01:27
Behavioral task
behavioral1
Sample
b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe
Resource
win7-20240319-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe
- Size 32KB
- Sample240406-bveaeaha64
- SHA256 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134
- MD5 5bba9ec100aa8950bf404df55aab2f7d
- SHA1 fddb5d1e2f7506da4c02ddc8006a47b6f97de889
- SHA512 3f09da91e5b267dcf36a31da20c0734f6cea7f8bdb89e5d9790387bb693b1178b6ae40c2568c6c5a3db0842bb03d2d745c9da1b8f4c980c0e1623375deeaee3d
- SSDEEP 384:U0bUe5XB4e0XuOhaixBr/QSWTJtTUFQqzF/ZObb1:xT9ButMifrYlweb1
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: 33 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe Token: SeIncBasePriorityPrivilege 3220 b115b4a3dd4dc736eb26b5b48742843c6df2257056b5ad4b5ac0b1ecfae9c134.exe