Analysis
-
max time kernel
119s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system -
submitted
19-07-2024 14:57
Static task
static1
Behavioral task
behavioral1
Sample
3e3185efc2f5a997dea4c4c540cd7dae379678bb7d25a769f5a956b1112ace9c.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
3e3185efc2f5a997dea4c4c540cd7dae379678bb7d25a769f5a956b1112ace9c.exe
Resource
win10v2004-20240709-en
General
-
Target
3e3185efc2f5a997dea4c4c540cd7dae379678bb7d25a769f5a956b1112ace9c.exe
-
Size
1.3MB
-
MD5
a4cc2450ef7668f0bb678e2a8100af7f
-
SHA1
d70956a007567c6af2ff7aa000e8092f374a2a3e
-
SHA256
3e3185efc2f5a997dea4c4c540cd7dae379678bb7d25a769f5a956b1112ace9c
-
SHA512
5e9d227297c34200866253cf838f22928126d88794e0b260d1fcbf482bcdad7ca0022d56ae887b8005b8036dd4a9f373f85df83af5d406d88b021f60a6ecb495
-
SSDEEP
6144:GqoN+FPeA5iTuggkYzJLAdRL9Je+2h00h00h09zJLAdRbM9aAMaK2+IMxVwO8zJH:GZN+RL5HtaZDe+hta9jK8V/Mt5wK
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2756 3e3185efc2f5a997dea4c4c540cd7dae379678bb7d25a769f5a956b1112ace9c.exe Token: SeShutdownPrivilege 2756 3e3185efc2f5a997dea4c4c540cd7dae379678bb7d25a769f5a956b1112ace9c.exe