Analysis
-
max time kernel
146s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
24-11-2024 21:25
Behavioral task
behavioral1
Sample
cd13ea6d49b909c9b85b67cb549755bfc3a0d2d4eb34a16cbb75ce6af3256691.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
cd13ea6d49b909c9b85b67cb549755bfc3a0d2d4eb34a16cbb75ce6af3256691.exe
Resource
win10v2004-20241007-en
General
-
Target
cd13ea6d49b909c9b85b67cb549755bfc3a0d2d4eb34a16cbb75ce6af3256691.exe
-
Size
31KB
-
MD5
1d3916d851e22b08adf4421bf31ddecc
-
SHA1
a1a45bb7b754c604c139470dbcf6a08e2f01a2c9
-
SHA256
cd13ea6d49b909c9b85b67cb549755bfc3a0d2d4eb34a16cbb75ce6af3256691
-
SHA512
00b2f4d78ab5a540b1eac5d596b4a839500f647dda06d8d37cd0ce46a4483aa89973569bdf2a7ea7050eafa8cc2dc8c775fccbc242b34d17c8e9b171619b954d
-
SSDEEP
384:IG2mnny19npjllT9oDPlMNcLlb5sVKFyn5Ctj4XuJZwtfXbMpBjSr8f0DBRJPWBo:IG2mnny19tfclMNE8otHw8w1Pmo
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
cd13ea6d49b909c9b85b67cb549755bfc3a0d2d4eb34a16cbb75ce6af3256691.exedescription pid process Token: SeDebugPrivilege 3692 cd13ea6d49b909c9b85b67cb549755bfc3a0d2d4eb34a16cbb75ce6af3256691.exe