Analysis
-
max time kernel
148s -
max time network
148s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
21-05-2024 14:12
Static task
static1
Behavioral task
behavioral1
Sample
cae157e91a9e0a4ea660d3650ab18710272f87d440ee2106b652a55e8d927590.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
cae157e91a9e0a4ea660d3650ab18710272f87d440ee2106b652a55e8d927590.exe
Resource
win10v2004-20240426-en
General
-
Target
cae157e91a9e0a4ea660d3650ab18710272f87d440ee2106b652a55e8d927590.exe
-
Size
365KB
-
MD5
fa5cf80a20a6a71712a168c651d2ff02
-
SHA1
35a289017518dbe98a8d65202fc9e559a7eb06de
-
SHA256
cae157e91a9e0a4ea660d3650ab18710272f87d440ee2106b652a55e8d927590
-
SHA512
ed3fd276eb7e6aeb869de5a53672a453bae4198c32f4ececb73056e22d2975a65f3fc7bc569444a216f9b63a7e74fe53a66aa1ffc713f433ec3ccd6744c7cdbe
-
SSDEEP
6144:j2U0XkaWk18I9g7Upch87rFS2xkuLLcvOMoKQvDWEWS7GV:jqWUh82xkNeLDWE2
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
cae157e91a9e0a4ea660d3650ab18710272f87d440ee2106b652a55e8d927590.exedescription pid process Token: SeDebugPrivilege 2020 cae157e91a9e0a4ea660d3650ab18710272f87d440ee2106b652a55e8d927590.exe