Analysis
- max time kernel
149s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20241007-en - resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system - submitted
07/11/2024, 13:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9.exe
Resource
win7-20241010-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9.exe
Resource
win10v2004-20241007-en
2 signatures
150 seconds
General
- Target 2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9.exe
- Size 8.6MB
- Sample241107-qwth2ssmd1
- SHA256 2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9
- MD5 1201c30a6a96371158ecc9cab3b4fe53
- SHA1 fd09bd4a8f628c51a53050d826c5824fa4216f35
- SHA512 318d7cd3ccf4fe567a8e2d492bb227670ce6c95f65018ed976a5a7ad845b8a8e8ff5056c0b4780430688e7304af334d18822d01c79a0f9df7efd24ad54b3ba44
- SSDEEP 98304:d+Sq+l2VHOCoFPSWelD1ZSxfsQfSCH8UGjsBV57:Jq+laaFPOlD1AqQlcUGj
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 1984 2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9.exe 1984 2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1984 2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9.exe"C:\Users\Admin\AppData\Local\Temp\2037a021ebdbb489ac08f09e6e724412d666ade3dd13d1a13d7e0140203205e9.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1984