Analysis
- max time kernel
148s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
07/04/2024, 01:57
Behavioral task
behavioral1
Sample
10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe
Resource
win7-20240215-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe
- Size 32KB
- Sample240407-cdpkgshh5s
- SHA256 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a
- MD5 fe66b9f1d593f58fe20422677a1f1ca8
- SHA1 ce12b6a0da2d66609f3faa3bc63960a43a5cc021
- SHA512 b09496299b8f5a8cccf594ce26aae8210e8645ad8b455e56bba03a5aa8131be8cfdf40ef411e583dffb9ee1e02ec50b3ce83a2ddbabfec9a9ac95593e0468ffe
- SSDEEP 384:t0bUe5XB4e0XGOPCANuiEO0YaxWTOtTUFQqzFlObby:+T9BuVKguiEYyXby
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: 33 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe Token: SeIncBasePriorityPrivilege 624 10594a1471f951bfdee5d264250a67a34af443bd25af12d15c0295a92ee0b44a.exe