Analysis
-
max time kernel
151s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
08-10-2023 01:10
Behavioral task
behavioral1
Sample
0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe
-
Size
1.7MB
-
MD5
ed156fbc3f4d4248bb680cb6711a78a4
-
SHA1
19463b20ffb99df13d8e02d24bdbdb2e3980b097
-
SHA256
0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb
-
SHA512
415d68ecd1e2a3dd17e92a733c916fef6c1dccf23b1e345cdb2f5afc3972420368b4777819f489e54736d13efc5c179196aae7b76f5d596d5903f6cb0baf8867
-
SSDEEP
24576:fNTk0CqZeG/08PmUaOX/1jcyFIBHiLfadsUILqsYDSVXT5XCCCya:fNTkEZ4uTaOX1cIIB1sMsdXT5XDC1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe Token: SeDebugPrivilege 1180 0666665433fa1ee86a00c6f0ac32aca55b67f5408d1712825d7d15bbc8ef0ecb.exe