Analysis
-
max time kernel
106s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
14-11-2024 00:32
Behavioral task
behavioral1
Sample
8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exe
Resource
win7-20241010-en
1 signatures
120 seconds
Behavioral task
behavioral2
Sample
8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exe
Resource
win10v2004-20241007-en
1 signatures
120 seconds
General
-
Target
8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exe
-
Size
1.6MB
-
MD5
d1aa1291947a53247bc9d5abf88ecd32
-
SHA1
26ef8aa3878792464fa74d9eef10bf60aee1be39
-
SHA256
8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68
-
SHA512
aad2d2063f7cf781a82eb3f6ab8a43b4a9416e7f89e58036b4b2466b7f08875fe8f7637363672d49f54a7093760dae22170e62d0d31cb56c4e0d957fe0ba2c46
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQDWT:GemTLkNdfE0pZyH
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exedescription pid Process Token: SeLockMemoryPrivilege 2172 8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exe Token: SeLockMemoryPrivilege 2172 8ffa177342c1a0d02b18b3e9086d069cf70688d0be5ace53a20d0dd75b563d68.exe