Analysis
-
max time kernel
105s -
max time network
115s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
14-11-2024 00:55
Behavioral task
behavioral1
Sample
1a8e97d1ebae0e6c040f90623090a94ad009f7dcc486328abc1b86d596cc4fb1.exe
Resource
win7-20240903-en
1 signatures
120 seconds
Behavioral task
behavioral2
Sample
1a8e97d1ebae0e6c040f90623090a94ad009f7dcc486328abc1b86d596cc4fb1.exe
Resource
win10v2004-20241007-en
1 signatures
120 seconds
General
-
Target
1a8e97d1ebae0e6c040f90623090a94ad009f7dcc486328abc1b86d596cc4fb1.exe
-
Size
1.5MB
-
MD5
d279ad2e85a82ee28796832e0915b176
-
SHA1
41399fc3a83b6f093302951ff4b6e53143d475e7
-
SHA256
1a8e97d1ebae0e6c040f90623090a94ad009f7dcc486328abc1b86d596cc4fb1
-
SHA512
9f49de40d78dca9bb5a9ace3397d778e5b01a26b6583f7bc3d4ae59fd4f05fd7e8c00251b6db76afef576eddc0c389b817e6fbef56511c6e866515ec8ba6cd58
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5ybq6r:GemTLkNdfE0pZym
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
1a8e97d1ebae0e6c040f90623090a94ad009f7dcc486328abc1b86d596cc4fb1.exedescription pid Process Token: SeLockMemoryPrivilege 436 1a8e97d1ebae0e6c040f90623090a94ad009f7dcc486328abc1b86d596cc4fb1.exe Token: SeLockMemoryPrivilege 436 1a8e97d1ebae0e6c040f90623090a94ad009f7dcc486328abc1b86d596cc4fb1.exe