Analysis
-
max time kernel
105s -
max time network
115s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14-11-2024 00:37
Behavioral task
behavioral1
Sample
06f593ff288070e3b21e02281ada44987563fb540b0e4b7395f3693dba5029ee.exe
Resource
win7-20240903-en
1 signatures
120 seconds
Behavioral task
behavioral2
Sample
06f593ff288070e3b21e02281ada44987563fb540b0e4b7395f3693dba5029ee.exe
Resource
win10v2004-20241007-en
1 signatures
120 seconds
General
-
Target
06f593ff288070e3b21e02281ada44987563fb540b0e4b7395f3693dba5029ee.exe
-
Size
1.6MB
-
MD5
24e75f45ebc870f9a4efd58f54ff27cb
-
SHA1
e0faba72521fea320561974709b15d7ef65016b3
-
SHA256
06f593ff288070e3b21e02281ada44987563fb540b0e4b7395f3693dba5029ee
-
SHA512
34886b049adea93090cad03b57e9e6d3d8c4486b09ac7d92e2214a3928205c769522369ed06f0952a31c2cdd0af303c3fde45dd7c9f45956e23c499e1cb829de
-
SSDEEP
49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZsGR:GemTLkNdfE0pZyJ
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
06f593ff288070e3b21e02281ada44987563fb540b0e4b7395f3693dba5029ee.exedescription pid Process Token: SeLockMemoryPrivilege 2100 06f593ff288070e3b21e02281ada44987563fb540b0e4b7395f3693dba5029ee.exe Token: SeLockMemoryPrivilege 2100 06f593ff288070e3b21e02281ada44987563fb540b0e4b7395f3693dba5029ee.exe