Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14-11-2024 01:05
Behavioral task
behavioral1
Sample
c029e3270afdc5e2bd30df64b58574a58d990e2f0b8e496f170c97331547e2a7.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
c029e3270afdc5e2bd30df64b58574a58d990e2f0b8e496f170c97331547e2a7.exe
Resource
win10v2004-20241007-en
General
-
Target
c029e3270afdc5e2bd30df64b58574a58d990e2f0b8e496f170c97331547e2a7.exe
-
Size
1.3MB
-
MD5
91cfa7e5a3afc20df57f8eed86582230
-
SHA1
fa11908bf32695ba48a1c7d4ed32510a42037729
-
SHA256
c029e3270afdc5e2bd30df64b58574a58d990e2f0b8e496f170c97331547e2a7
-
SHA512
fc319b60c1643d8f2946afefa1fee10bc3ec442be608743a568e6d0d08d0ed53292180fedd0682943f03dce8767feb130618ad332c9534bd878e7435c44b1a72
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKensziXoSPqZi/O:GezaTF8FcNkNdfE0pZ9ozttwIRRh
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
c029e3270afdc5e2bd30df64b58574a58d990e2f0b8e496f170c97331547e2a7.exedescription pid Process Token: SeLockMemoryPrivilege 2644 c029e3270afdc5e2bd30df64b58574a58d990e2f0b8e496f170c97331547e2a7.exe Token: SeLockMemoryPrivilege 2644 c029e3270afdc5e2bd30df64b58574a58d990e2f0b8e496f170c97331547e2a7.exe