Analysis
-
max time kernel
151s -
max time network
148s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2023 07:22
Behavioral task
behavioral1
Sample
2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe
-
Size
1.5MB
-
MD5
d99e7add5753cdc224c9a94cc298b97b
-
SHA1
c7d0343abd319642862d5530dbdc5e501b182ded
-
SHA256
2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d
-
SHA512
a8fabea77c43933ac9e4f30216d2c207705298b48d21121e25238071bfe09d62882e9ee83d70f7ebecc27375983225f94db326f3f5d3ee6e619f3f193b8e39f4
-
SSDEEP
24576:0J5vPhWgK182otnyGWfotlhkTDSVXT5XSAxya3AWOE:C5IgK182otyGZhkwXT5XSO1w4
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe Token: SeDebugPrivilege 3012 2c700ee40c94d0326a17d64d920c4c9ca5f2ae43c70a354efd043cd45e0a979d.exe