Analysis
-
max time kernel
151s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
11-10-2023 12:09
Behavioral task
behavioral1
Sample
66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe
Resource
win7-20230831-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe
-
Size
1.6MB
-
MD5
55064d0b706fe092d15771cc1637a876
-
SHA1
a40e05e4796685730948c764bbb0091dbb7df73d
-
SHA256
66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf
-
SHA512
8f503baea3548fdf8fa01686427280cca647f2d4faeda74024958dc299332c81ca86e8c8c9880489a03d9179383f728b8f74f796a5931ce559f2e3a65b70cdda
-
SSDEEP
49152:pDoF2ue5orRW2jAkuffSetz03ZXT5XI1:OSnsuf6KGD541
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe Token: SeDebugPrivilege 3348 66ada5ca68c825423075e99458e522f8f6fb41b6b3d0b485a0532d93ec8516cf.exe