Analysis
-
max time kernel
105s -
max time network
115s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
14-11-2024 01:17
Behavioral task
behavioral1
Sample
8b0fe36d48ab4f4b2bc450ec163028412cb1ecc966897fbe843cf7274b232043.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8b0fe36d48ab4f4b2bc450ec163028412cb1ecc966897fbe843cf7274b232043.exe
Resource
win10v2004-20241007-en
General
-
Target
8b0fe36d48ab4f4b2bc450ec163028412cb1ecc966897fbe843cf7274b232043.exe
-
Size
1.5MB
-
MD5
5accd9019b48697e1ccbe8b0bcabfb0c
-
SHA1
6da96b5e329ced01ad6ade8654153e9243852363
-
SHA256
8b0fe36d48ab4f4b2bc450ec163028412cb1ecc966897fbe843cf7274b232043
-
SHA512
c0d4b11284d651d1339909a682f755d9a0497266f2b06046a5ad099d3f796ec9ab6e75380e722dcd7fe65b6845879b884e897d21022a74620d5722f90cca04d1
-
SSDEEP
24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbcT:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5V
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes:
8b0fe36d48ab4f4b2bc450ec163028412cb1ecc966897fbe843cf7274b232043.exedescription pid Process Token: SeLockMemoryPrivilege 2336 8b0fe36d48ab4f4b2bc450ec163028412cb1ecc966897fbe843cf7274b232043.exe Token: SeLockMemoryPrivilege 2336 8b0fe36d48ab4f4b2bc450ec163028412cb1ecc966897fbe843cf7274b232043.exe