Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09-07-2024 21:55
Static task
static1
Behavioral task
behavioral1
Sample
49c43e2e1ada329219c278e0fdbb3d93e6bea1ec5df0744fe63353cc823beab2.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
49c43e2e1ada329219c278e0fdbb3d93e6bea1ec5df0744fe63353cc823beab2.exe
General
-
Target
49c43e2e1ada329219c278e0fdbb3d93e6bea1ec5df0744fe63353cc823beab2.exe
-
Size
702KB
-
MD5
cba6c613eb6eb68aae10316eab223963
-
SHA1
1eaeaa38e3662726d838d876f855f211035519fc
-
SHA256
49c43e2e1ada329219c278e0fdbb3d93e6bea1ec5df0744fe63353cc823beab2
-
SHA512
d6e96edcba42efae5f4873c4c2848769d7999da9a520fdaa9943d0785e49d1ab82460b2b2e8021cf9341f9884cb82ff6cc7b94f882e84258d0212a4964a951b7
-
SSDEEP
12288:aSOFz/kwWCIkeRlk7ugd1EOFcNW2f+zRIxzA0RJ4P3Zu/t4ZJ0FSlg6BdLET7bIV:UFjfWHRlMugdD+JsRgZRJ4fM430Eg6nj
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeTakeOwnershipPrivilege 2092 49c43e2e1ada329219c278e0fdbb3d93e6bea1ec5df0744fe63353cc823beab2.exe