Analysis
-
max time kernel
132s -
max time network
101s -
platform
windows10-2004_x64 -
resource
win10v2004-20240508-en -
resource tags
arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system -
submitted
02-06-2024 19:11
Static task
static1
Behavioral task
behavioral1
Sample
cf4817decc126e476eaa79671ddc099f1ec27a4480c15f5507688901259469f5.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cf4817decc126e476eaa79671ddc099f1ec27a4480c15f5507688901259469f5.exe
Resource
win10v2004-20240508-en
General
-
Target
cf4817decc126e476eaa79671ddc099f1ec27a4480c15f5507688901259469f5.exe
-
Size
1.3MB
-
MD5
bc543f8c9dac990b87837de49843e8ec
-
SHA1
a0b571f733f8b38ffefaf11af30d06f1b3797642
-
SHA256
cf4817decc126e476eaa79671ddc099f1ec27a4480c15f5507688901259469f5
-
SHA512
26ec35321277277fbde01134020f451f3ce5f01ff26ec5a48f69c5b5c38a347c866cb7039cc95242424599aea95dcd136ca2388762bd64b2c227fd4d8a87b9bf
-
SSDEEP
24576:ouGBd2KNLNS/k0OrDPkhKaGv03soUkFt6AcyTkgnNLpkzhHemaq:otscPvkhnFmeNJTkQ+ze
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2500 cf4817decc126e476eaa79671ddc099f1ec27a4480c15f5507688901259469f5.exe