Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20240412-en - resource tags
arch:x64arch:x86image:win10v2004-20240412-enlocale:en-usos:windows10-2004-x64system - submitted
19/04/2024, 17:20
Behavioral task
behavioral1
Sample
2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe
Resource
win7-20240221-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe
- Size 32KB
- Sample240419-vwk9wsbb91
- SHA256 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf
- MD5 8463c84711f2b74290e2e2d8fe720d3d
- SHA1 a24e1b07f17e2d012c775ce675002a5e1e2486c0
- SHA512 59773cd41d3d8eab884a7d63944d359d385dc78e3181112a65077382da039f2a519210fdb7d653aadfa566d4b47f22dbcb54d43cb7e6b378289677ced7bf3fbb
- SSDEEP 384:y0bUe5XB4e0X+OlCANuiEO0YaBWTetTUFQqzF/mObby:rT9BudYguiEYSwlby
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: 33 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe Token: SeIncBasePriorityPrivilege 3172 2d1bad8c5f5a3c8db35e3a7c8becd66ea3c83a39800877eac74408d747bb5caf.exe