bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643

Analysis

max time kernel
148s
max time network
135s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
12-06-2024 02:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Size

32KB
MD5

586aef0f1cdbfe27b87a3950f6455013
SHA1

e720397ab8c44d50a7fb9597442896acf4668c55
SHA256

bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643
SHA512

df0a2e39d935154191a2b28e9dff2317297aed2ac2bc1641c7fed15298a9ce51134f8c5b7fd9217060518ef3766f5fb83c6de8bcbb369527f4227342adcc9ed6
SSDEEP

384:k0bUe5XB4e0XOOVcVSjgkMeWTQtTUFQqz9uqObbg:hT9BuN6VSjeetJbg

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 37 IoCs

Processes:

bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe

description	pid	process
Token: SeDebugPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: 33	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
Token: SeIncBasePriorityPrivilege	1976	bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe

C:\Users\Admin\AppData\Local\Temp\bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe
"C:\Users\Admin\AppData\Local\Temp\bf373574d290ce64aea2f8fd6e7075b0106b33206457f33d618d53e8ae481643.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1976

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/1976-0-0x0000000074C21000-0x0000000074C22000-memory.dmp

Filesize
4KB

Download
memory/1976-1-0x0000000074C20000-0x00000000751CB000-memory.dmp

Filesize
5.7MB

Download
memory/1976-2-0x0000000074C20000-0x00000000751CB000-memory.dmp

Filesize
5.7MB

Download
memory/1976-3-0x0000000074C20000-0x00000000751CB000-memory.dmp

Filesize
5.7MB

Download