Analysis
- max time kernel
119s - max time network
120s - platform
windows7_x64 - resource
win7-20241010-en - resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system - submitted
14/11/2024, 00:37
Behavioral task
behavioral1
Sample
5d7bf6540ea12290cf23af89d771f7b93397bcef719383aea782761d89e878c2.exe
Resource
win7-20241010-en
1 signatures
120 seconds
Behavioral task
behavioral2
Sample
5d7bf6540ea12290cf23af89d771f7b93397bcef719383aea782761d89e878c2.exe
Resource
win10v2004-20241007-en
1 signatures
120 seconds
General
- Target 5d7bf6540ea12290cf23af89d771f7b93397bcef719383aea782761d89e878c2.exe
- Size 1.8MB
- Sample241114-ayhlkasblh
- SHA256 5d7bf6540ea12290cf23af89d771f7b93397bcef719383aea782761d89e878c2
- MD5 2de19f877d3873fa3d007a2be24e466a
- SHA1 54506a602e94ce4c2a0a769a36c1eddb4d967c60
- SHA512 be940cb8e4b739a60ba9b0b096b4662ed0102b92d779934c90182e3ccf5db7c3c08bbed79f4519b938df73c7506b7590d36d7d4f4748685155b2d07f7c9390d6
- SSDEEP 49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnQbZLvitB:GemTLkNdfE0pZyV
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeLockMemoryPrivilege 2116 5d7bf6540ea12290cf23af89d771f7b93397bcef719383aea782761d89e878c2.exe Token: SeLockMemoryPrivilege 2116 5d7bf6540ea12290cf23af89d771f7b93397bcef719383aea782761d89e878c2.exe