Analysis
-
max time kernel
105s -
max time network
115s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
13-11-2024 23:49
Behavioral task
behavioral1
Sample
ece1e5182fec886d6885281cda6b65c98981d9cb2dfb6144f4bee3b345a1be00.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
ece1e5182fec886d6885281cda6b65c98981d9cb2dfb6144f4bee3b345a1be00.exe
Resource
win10v2004-20241007-en
General
-
Target
ece1e5182fec886d6885281cda6b65c98981d9cb2dfb6144f4bee3b345a1be00.exe
-
Size
1.1MB
-
MD5
4ea2fa5d3e2d3f771ddd55323c8d5b53
-
SHA1
da2b3e8ad529420364c192e58654c88865faebc6
-
SHA256
ece1e5182fec886d6885281cda6b65c98981d9cb2dfb6144f4bee3b345a1be00
-
SHA512
90d41823eb109fb3fed97d5dc3d8193a455799c19f163b3734464b91717ca42f8c741b956135c5903420aa70784d20efc504bfe0e9e6eb8b191cafbd28ae68d3
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5QbCxUN:GezaTF8FcNkNdfE0pZ9ozttwIRx2yE
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
ece1e5182fec886d6885281cda6b65c98981d9cb2dfb6144f4bee3b345a1be00.exedescription pid Process Token: SeLockMemoryPrivilege 2640 ece1e5182fec886d6885281cda6b65c98981d9cb2dfb6144f4bee3b345a1be00.exe Token: SeLockMemoryPrivilege 2640 ece1e5182fec886d6885281cda6b65c98981d9cb2dfb6144f4bee3b345a1be00.exe