Analysis
- max time kernel
150s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20240226-en - resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system - submitted
11/04/2024, 01:52
Behavioral task
behavioral1
Sample
ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe
Resource
win7-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe
Resource
win10v2004-20240226-en
1 signatures
150 seconds
General
- Target ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe
- Size 32KB
- Sample240411-caek4shc25
- SHA256 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710
- MD5 32441e23d772db28738bb0208330e1f8
- SHA1 782e56d9bb92c6b9be30a749e28822505e88ce30
- SHA512 a61b34c27b682555746b2fc2760e50f226ffb799bbac53592ee43d64fda816fb53af177f677650a019db16ed0c10becdc8f6c926748d8950501ee028e2c96819
- SSDEEP 384:c0bUe5XB4e0X7Od6ANuiEO0YaFWT6tTUFQqzFSObba:JT9BuC4guiEYKYba
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: 33 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe Token: SeIncBasePriorityPrivilege 4700 ee98deeca8c3daf8c538198639864c18677f59fd68bf130920c51af737bca710.exe