Analysis
- max time kernel
148s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
24/04/2026, 00:01
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Virus.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
Virus.exe
Resource
win10ltsc2021-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
Virus.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target Virus.exe
- Size 34KB
- Sample260424-aay9eaay8x
- SHA256 c982f4af88d31cdf94f0acd9e4b909b848b32126e173860c79b678237377350e
- MD5 0d0c0c09bcd884314926f200cdeecde9
- SHA1 befdf1882af7bafdfd85c2bb524bad2088464e7c
- SHA512 3e5a54669e95333782256239f6929e494855b18362f984b22611ef2ce59be462d7f865801b8183b9a316516810431e2de2dece9fa3fb1fabf4cd6b787f8b7941
- SSDEEP 384:HgID0EcUgIZMwZZG+gZsFG+FDwMzBJsTMFX4peY9t0REzi9ZwhE+Pb9S/Vz12TiJ:HgIDKUgIZMwZZuGFX4pe4n59KwTiJ
- TLSH T132F2F84AAF8C8433C29E6BFDA96217538370F5660613E78E95CC94B12AD33D61D493CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 4 IoCs
description pid Process Token: SeDebugPrivilege 4676 Virus.exe Token: SeDebugPrivilege 4676 Virus.exe Token: 33 6016 AUDIODG.EXE Token: SeIncBasePriorityPrivilege 6016 AUDIODG.EXE
Processes
-
C:\Users\Admin\AppData\Local\Temp\Virus.exe"C:\Users\Admin\AppData\Local\Temp\Virus.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4676
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x00000000000004E4 0x00000000000004D41⤵
- Suspicious use of AdjustPrivilegeToken
PID:6016