Analysis
- user interaction
yes - max time kernel
22s - max time network
29s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/10/2026, 17:16
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Sayonara_Reversed.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
General
- Target Sayonara_Reversed.exe
- Size 205KB
- Sample261002-vtbmnseh77
- SHA256 223b373ba92a427eadd75aacc664700d7c64db305de6db14d481f9f0aaa35e79
- MD5 9a015a1be3a4c1f9e866adbc28046919
- SHA1 bcf29caae0e81bf5a90b62aea9c03b4a08f7bfbe
- SHA512 f892059e2af0f2342449a715794bcc32484dfc06f9d3b8cf594d1ffadcbe4baf9ae1d475705093b5727b4fc338cb0f0504bc940c72500218c6f2a570736bf79d
- SSDEEP 3072:PS/Yy6Em1F/GbK636xYwMDRyBOzUW1p7GzOmkO34+:68EqR9636hMDeEV7z+
- TLSH T17E244BC1BBC59CD7FA06523849AB8329E23CFAC547825B47093972350E13AD16FCB65B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 12 IoCs
description pid Process Token: SeDebugPrivilege 4596 Sayonara_Reversed.exe Token: SeShutdownPrivilege 4596 Sayonara_Reversed.exe Token: SeTcbPrivilege 4596 Sayonara_Reversed.exe Token: SeTakeOwnershipPrivilege 4596 Sayonara_Reversed.exe Token: SeLoadDriverPrivilege 4596 Sayonara_Reversed.exe Token: SeBackupPrivilege 4596 Sayonara_Reversed.exe Token: SeRestorePrivilege 4596 Sayonara_Reversed.exe Token: SeSecurityPrivilege 4596 Sayonara_Reversed.exe Token: SeSystemEnvironmentPrivilege 4596 Sayonara_Reversed.exe Token: SeIncreaseQuotaPrivilege 4596 Sayonara_Reversed.exe Token: SeAssignPrimaryTokenPrivilege 4596 Sayonara_Reversed.exe Token: SeCreatePermanentPrivilege 4596 Sayonara_Reversed.exe