Analysis
-
max time kernel
105s -
max time network
115s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14-11-2024 00:47
Behavioral task
behavioral1
Sample
bf9e441c283ed9f21895bb07f920f6e011ef8f2e3b0ac39aca014e313779b014.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
bf9e441c283ed9f21895bb07f920f6e011ef8f2e3b0ac39aca014e313779b014.exe
Resource
win10v2004-20241007-en
General
-
Target
bf9e441c283ed9f21895bb07f920f6e011ef8f2e3b0ac39aca014e313779b014.exe
-
Size
1.5MB
-
MD5
915b736622ee3772cd09bb57225b3369
-
SHA1
2bc549904dedbf7c284a664c8aa87d5e66384b14
-
SHA256
bf9e441c283ed9f21895bb07f920f6e011ef8f2e3b0ac39aca014e313779b014
-
SHA512
841ff3d2104335843268ae14bfc1e7fd392e710ad3242d352df12897f5e69521c0793366682e2bf3c0129c30b9b922cd726d4cab311957cf941fd95651c5d6d3
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbcU:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5u
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
bf9e441c283ed9f21895bb07f920f6e011ef8f2e3b0ac39aca014e313779b014.exedescription pid Process Token: SeLockMemoryPrivilege 2884 bf9e441c283ed9f21895bb07f920f6e011ef8f2e3b0ac39aca014e313779b014.exe Token: SeLockMemoryPrivilege 2884 bf9e441c283ed9f21895bb07f920f6e011ef8f2e3b0ac39aca014e313779b014.exe