Analysis
-
max time kernel
105s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
13-11-2024 10:25
Behavioral task
behavioral1
Sample
19164fcd854b33178c9ae718a66c88938fa806356e66564e2ea571f8760145b5.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
19164fcd854b33178c9ae718a66c88938fa806356e66564e2ea571f8760145b5.exe
Resource
win10v2004-20241007-en
General
-
Target
19164fcd854b33178c9ae718a66c88938fa806356e66564e2ea571f8760145b5.exe
-
Size
1.3MB
-
MD5
227d01659793cecc1e3f759075f654d1
-
SHA1
d2a944b9268eb56734acca16521eac208c25d6a1
-
SHA256
19164fcd854b33178c9ae718a66c88938fa806356e66564e2ea571f8760145b5
-
SHA512
f33259d4fcc2b4c79883e3423838a8ac23012c1409dacac6eb0ca215297ca85c1c8d39d4b88ad25eff097cd843e4541cc692c7812cb154f7f0fb9a13b7ebbf27
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5ph7NAmE25G:GezaTF8FcNkNdfE0pZ9ozttwIRxHO
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
19164fcd854b33178c9ae718a66c88938fa806356e66564e2ea571f8760145b5.exedescription pid Process Token: SeLockMemoryPrivilege 3212 19164fcd854b33178c9ae718a66c88938fa806356e66564e2ea571f8760145b5.exe Token: SeLockMemoryPrivilege 3212 19164fcd854b33178c9ae718a66c88938fa806356e66564e2ea571f8760145b5.exe