Analysis
-
max time kernel
106s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
13-11-2024 09:47
Behavioral task
behavioral1
Sample
2340b554ca9c29ee0f46ce3378b7d747f0b17d37b5f3014b3e55d2d8fe61f386.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
2340b554ca9c29ee0f46ce3378b7d747f0b17d37b5f3014b3e55d2d8fe61f386.exe
Resource
win10v2004-20241007-en
General
-
Target
2340b554ca9c29ee0f46ce3378b7d747f0b17d37b5f3014b3e55d2d8fe61f386.exe
-
Size
1.0MB
-
MD5
34ea2fdc1f5df448b255fd5cfc4a93ce
-
SHA1
24067ea89d5592ea433c5cd5b93bd9689d5a9301
-
SHA256
2340b554ca9c29ee0f46ce3378b7d747f0b17d37b5f3014b3e55d2d8fe61f386
-
SHA512
baadc7507fd24a71baf00b465e9ebf6268ffd23925d219d0f5ba75b2f80270acf5c6c638dd5541f2d52accfbeb244d4f4f98972c325f4c34f1ca447aa8053516
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKensz+me69Oqld8Q+:GezaTF8FcNkNdfE0pZ9ozttwIRQw8T
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
2340b554ca9c29ee0f46ce3378b7d747f0b17d37b5f3014b3e55d2d8fe61f386.exedescription pid Process Token: SeLockMemoryPrivilege 2792 2340b554ca9c29ee0f46ce3378b7d747f0b17d37b5f3014b3e55d2d8fe61f386.exe Token: SeLockMemoryPrivilege 2792 2340b554ca9c29ee0f46ce3378b7d747f0b17d37b5f3014b3e55d2d8fe61f386.exe