Analysis
- max time kernel
148s - max time network
153s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
09/04/2024, 01:08
Behavioral task
behavioral1
Sample
bU41.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
bU41.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target bU41.exe
- Size 32KB
- Sample240409-bg8bbsda3w
- SHA256 c91d7eeea984c25fd82975c24a181e09751c25d3a97a440f15104ba83768c883
- MD5 0d4930c83a7b48f8a9885d438db4d62e
- SHA1 20efd02080a14edf16f27a14a6e73e58cd3a17b0
- SHA512 55d153cec961ff5845d0b3232f9b36771c532f685ed8f8e4e5220545551201d6b44f4fbfd59711bc6e700df26c3560fcb8ff1acb7611a5cf6e201c392e0a875b
- SSDEEP 384:q0bUe5XB4e0XGOd/w0Q0mS03AWTxtTUFQqzF/ObbZ:zT9BuVi55dVbZ
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe Token: 33 3424 bU41.exe Token: SeIncBasePriorityPrivilege 3424 bU41.exe