Analysis
- max time kernel
150s - max time network
94s - platform
windows10-2004_x64 - resource
win10v2004-20240426-en - resource tags
arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system - submitted
11/06/2024, 22:25
Behavioral task
behavioral1
Sample
ddddddd.exe
Resource
win7-20240508-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ddddddd.exe
Resource
win10v2004-20240426-en
windows10-2004-x64
1 signatures
150 seconds
General
- Target ddddddd.exe
- Size 164KB
- Sample240611-2b647athkk
- SHA256 83114ce40be4d2a9c4c56652795dc0add48350d3c776de0e8f3382cb0d8b9e9c
- MD5 eee3f090ebcc9d592fad87c3e7bb7bec
- SHA1 30b5566208bac4342e5618a17d575d268e19c9d2
- SHA512 4724ed6f6f11086e188c19eecd9b3dcd7bf2115801c68c5c80e00c85bdba74847ee3eeb19db5012b40d131afa2d4b977634e1402b6427b934c66e96e1966bb1c
- SSDEEP 3072:aiby/4arEoIfDGVe58N1JlZ+gEru7AdEm6Ga6+bc7tSRn8:ailn585/Mveh3bG
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe Token: 33 1280 ddddddd.exe Token: SeIncBasePriorityPrivilege 1280 ddddddd.exe