Analysis
-
max time kernel
149s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system -
submitted
19/04/2024, 16:42
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe
Resource
win7-20240221-en
windows7-x64
2 signatures
150 seconds
General
-
Target
b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe
-
Size
26KB
-
MD5
0282468e9f1de071b19373581696e846
-
SHA1
b638adb1d995139824b04efea9e2881a7c6d5e75
-
SHA256
b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205
-
SHA512
fb49dcfc04491dfba933185c9f2b5d7504a0fb3684a2cbb5ba41a0adbdafe944310773bb35dc8815837f5d84c6ea758ed902adf68e0522dc4a3cf00e9838bbbe
-
SSDEEP
384:tLd6aaZIVi/dMkt1cpDkjetHzCYe/iBY2OzRLTm3yilqr63tbctVvGf:9T0IVi/dMc1uT5e/gsEKVvGf
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: SeIncBasePriorityPrivilege 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe Token: 33 4708 b88fab508a92dad0cf5b4ae5042c1a32c5dbf5d555c816a49fdc76f2370b7205.exe