Analysis
- max time kernel
150s - max time network
152s - platform
windows10-2004_x64 - resource
win10v2004-20240709-en - resource tags
arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system - submitted
23/07/2024, 07:36
Behavioral task
behavioral1
Sample
Payload.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
General
- Target Payload.exe
- Size 55KB
- Sample240723-jfpftsvcje
- SHA256 72e094db601af42d73a7fed616c4081e2d20e46e22c35d7a7bd781abdc3767ae
- MD5 62888d428cc4f58ab5e8d4a3becb83ba
- SHA1 f36d4d96f3bccfe244bd65290ce611b1db99aac5
- SHA512 18b4a9ad6efe93f18a8c534b5c31b46b6120bc303541fec2d85debff1c427f2b16e6d06867abe0f707264efe0181fb3c35334d3471e55feeb10315ef83bdaa32
- SSDEEP 1536:Zk05MDn5NRgyRhOzDhwsNMDpXExI3pmom:ZMDnBxfOzDhwsNMDpXExI3pm
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 37 IoCs
description pid Process Token: SeDebugPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe Token: 33 4900 Payload.exe Token: SeIncBasePriorityPrivilege 4900 Payload.exe