Analysis
-
max time kernel
150s -
max time network
145s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
16-05-2023 01:37
Behavioral task
behavioral1
Sample
bcacc9b5f549ea9f84b329bb2fdf9293.exe
Resource
win7-20230220-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bcacc9b5f549ea9f84b329bb2fdf9293.exe
Resource
win10v2004-20230220-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
bcacc9b5f549ea9f84b329bb2fdf9293.exe
-
Size
1.6MB
-
MD5
bcacc9b5f549ea9f84b329bb2fdf9293
-
SHA1
e5e6b61d29a99deb53d69ef72e1153bbf0beeb55
-
SHA256
eabc658deece003f4e76ef76fd0932a0a2d91e63725bb11daf07dc7052689b76
-
SHA512
86a385a22595129c3059c834a175c303b722f197a59a12bb96a96d01998ca0e8eff5a27552f4921745b7e015b98b4ad46b277099927af89249ce79b22b706483
-
SSDEEP
24576:2inUIrP+Zeb+NKgNqRB+uCny6Dorar3QrLamx4wlKDSVXT5Xzwya:2iZGXN3IB+Tny6cGlwlfXT5Xzw1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4556 bcacc9b5f549ea9f84b329bb2fdf9293.exe