Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system -
submitted
22-05-2024 22:48
Static task
static1
Behavioral task
behavioral1
Sample
VBCABLE_Setup_x64.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
VBCABLE_Setup_x64.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
150 seconds
General
-
Target
VBCABLE_Setup_x64.exe
-
Size
901KB
-
MD5
aad9093bc9182081a386325d9c931f90
-
SHA1
1d06ad447b60b147c05369e6e761e1aa8ba7a54d
-
SHA256
186892503330970c8e8d561adf9b71bd15cd93589306ec00fa60009ebf611ee6
-
SHA512
cd56bf05b32df0314e9f70e5808813c78a0b687e55426d2f333c835412e1631befc84af72fb31d00eff41e180aea021b719f57033f92474063a9629ceca54225
-
SSDEEP
6144:9sQl2TpetmQ8jiiVS6tQkyKdibdK2UTmPLagFOdhufzlmZeT7UmQBCDyUtHKwwo5:WzxnhTZUI6HKhgS9APmGKRH8MYmmBHf
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 7 IoCs
Processes:
VBCABLE_Setup_x64.exedescription pid process Token: SeRestorePrivilege 2008 VBCABLE_Setup_x64.exe Token: SeRestorePrivilege 2008 VBCABLE_Setup_x64.exe Token: SeRestorePrivilege 2008 VBCABLE_Setup_x64.exe Token: SeRestorePrivilege 2008 VBCABLE_Setup_x64.exe Token: SeRestorePrivilege 2008 VBCABLE_Setup_x64.exe Token: SeRestorePrivilege 2008 VBCABLE_Setup_x64.exe Token: SeRestorePrivilege 2008 VBCABLE_Setup_x64.exe