Analysis
-
max time kernel
148s -
max time network
150s -
platform
windows7_x64 -
resource
win7-20240221-en -
resource tags
arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system -
submitted
19/04/2024, 16:53
Behavioral task
behavioral1
Sample
a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe
-
Size
32KB
-
MD5
d20a2f488e6b5c20cd8ada381358ce55
-
SHA1
5cced3a6cb0f9938bcfa6fc60e10a926f06c274a
-
SHA256
a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764
-
SHA512
d7a6ebbcf80fe19fa051772bd2555296104dd64f0033b107d1b5f7e64e4e1d7af4d08a665e62351152e70905c49869fbaf1f9ebcb72e4590252ac1f172d2b407
-
SSDEEP
384:V0bUe5XB4e0XWOhaixBr/QHWTUtTUFQqzFxObbs:2T9BuFMifrYrHbs
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: 33 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe Token: SeIncBasePriorityPrivilege 2972 a1b6543b06333e8b8b6a90122c36e069d369a0742f5203e17c4c45fe5353e764.exe