Analysis
-
max time kernel
151s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20230824-en -
resource tags
arch:x64arch:x86image:win10v2004-20230824-enlocale:en-usos:windows10-2004-x64system -
submitted
30-08-2023 13:25
Behavioral task
behavioral1
Sample
6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe
Resource
win7-20230712-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe
Resource
win10v2004-20230824-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe
-
Size
1.6MB
-
MD5
cca81ee1e09a56b744e824eb4d23b55c
-
SHA1
869bc1d5420ae1627ca6e9eebdffecd848c352bc
-
SHA256
6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7
-
SHA512
88c0f29e2f0e35046e30b63e5742e54d7bbfe1dd7af7226aada8cee98e69fd1167f847290712656ba77c99d4723cab10fc8741ebf3b8c277ca9827346a7753ed
-
SSDEEP
24576:57kyOyrMRHYz1RnNLCuer6i/uSxFj2x47t+jcl6GDSVXT5XU0UlVVKya:5Wy6YJRNLrer2SxFVYjcyXT5XaVs1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe Token: SeDebugPrivilege 4336 6d13539d0aa64044858bc5bdba39f8877de6a53f600bbe0e47d526ade0a482c7.exe