Analysis
- max time kernel
149s - max time network
107s - platform
windows11-21h2_x64 - resource
win11-20240508-en - resource tags
arch:x64arch:x86image:win11-20240508-enlocale:en-usos:windows11-21h2-x64system - submitted
05/06/2024, 08:40
Behavioral task
behavioral1
Sample
test.exe
Resource
win10v2004-20240508-en
2 signatures
150 seconds
General
- Target test.exe
- Size 54KB
- Sample240605-kkwalsba61
- SHA256 62faafeacdb3dd7695468b98e4168100caa5f9772dc054cc926d1d846e746eef
- MD5 aa0cab2c6d54ebc52aef1eb0fcd8a911
- SHA1 04f137e3198d98208d5bc0cfe09573a55805688c
- SHA512 41db8b643057568818263d9ee30689ac6b5375bd11ba7bf3cf01921a1c7caa3ed76c16edbcbf5530bfebcccae65a14a86c95eb47ab5f359fecdd6130b5dc68a3
- SSDEEP 768:LKE4Awn/vB2EsltG19Zp30nJSNExWQG35bmaePD5Pv52XXJdxIEpmAg:LShtGtG1Dp2GWWQcGD8X3xIEpmAg
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe Token: 33 2052 test.exe Token: SeIncBasePriorityPrivilege 2052 test.exe