Analysis
-
max time kernel
14s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20241010-en -
resource tags
arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system -
submitted
23-11-2024 08:53
Static task
static1
Behavioral task
behavioral1
Sample
4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4.exe
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
General
-
Target
4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4.exe
-
Size
157KB
-
MD5
b5af483aba699bdc47d8a16fb9bb445e
-
SHA1
9bb3df0fb4cd4444bae37905ee935e0f2b86b849
-
SHA256
4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4
-
SHA512
a03cbc530f8bf253e86f3204497bf5716f9f1241112ff42997b1cd6c1d61b785f0480e26e52054f1aad5e9a48be6e224d3b30f100c5ad1739363fb7d5e16248c
-
SSDEEP
3072:v6qHUrQdS8G8B+JfNUfDnZZC4aSOHiE3pxce:iq0t83CUfDZkp
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4.exepid process 2376 4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4.exedescription pid process Token: SeDebugPrivilege 2376 4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4.exe"C:\Users\Admin\AppData\Local\Temp\4ab66fe4d4da4a14a28a3d2bc3a525cee18fc6a39176332817b3ea43f0beb9f4.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2376