Analysis
-
max time kernel
120s -
max time network
104s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
09/09/2024, 22:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2164e1e41979afc0257617b3e73faaa0N.exe
Resource
win7-20240903-en
windows7-x64
3 signatures
120 seconds
Behavioral task
behavioral2
Sample
2164e1e41979afc0257617b3e73faaa0N.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
120 seconds
General
-
Target
2164e1e41979afc0257617b3e73faaa0N.exe
-
Size
3.8MB
-
MD5
2164e1e41979afc0257617b3e73faaa0
-
SHA1
1d968b6def0f7b05711924cfbf4a8927105d2355
-
SHA256
26373132138c5833a3fc642923f9d7e423732de484891b9a94187afcfaa88f1a
-
SHA512
040967a20a8d5ba8944fb2ff2a99c75b987278be3299f9f34fdbed854f75cc2488cbd47d1b93915a3b8ff6bb76ed380a0493a20053890606a4820d91736621f9
-
SSDEEP
24576:GRcRcygSAthXLy3rftdfwmTKxmRp5fAZUlIC66ExMNcVOEjagNIow+tZGIAErvLb:FG3JJHRjJ+gP2KVybvGGRoQBU
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
flow ioc 7 raw.githubusercontent.com 6 raw.githubusercontent.com -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeDebugPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: 33 4372 2164e1e41979afc0257617b3e73faaa0N.exe Token: SeIncBasePriorityPrivilege 4372 2164e1e41979afc0257617b3e73faaa0N.exe