Analysis
- max time kernel
148s - max time network
142s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system - submitted
12/04/2024, 14:20
Behavioral task
behavioral1
Sample
xmsbkx2F0oQn.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
xmsbkx2F0oQn.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target xmsbkx2F0oQn.exe
- Size 32KB
- Sample240412-rnx2yaeb5y
- SHA256 d5287df696839eaff465b707962ff9ca0b5235a4890dc19465e3e4afde84013e
- MD5 73f21442e6e2f2851b4f43469c4a3045
- SHA1 878e8fd57ec84a270c0602d60b1c0b70281823f0
- SHA512 524e6907f063a76b4ce89eafda0f095543212b1af5fbf7558f67572a0346c186cb87035ccfe0b7b6615d4d42611417f1fa078c95d5ce567b05675d9d5807e1c9
- SSDEEP 384:n0bUe5XB4e0X+OJ4w0Q0mS03AWTxtTUFQqzF6WObbF:sT9BudH55dRVbF
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe Token: 33 4708 xmsbkx2F0oQn.exe Token: SeIncBasePriorityPrivilege 4708 xmsbkx2F0oQn.exe