Analysis
-
max time kernel
151s -
max time network
151s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
14-10-2023 12:19
Behavioral task
behavioral1
Sample
c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe
-
Size
2.0MB
-
MD5
5382aefed08597a45e6ef8836fdb70c5
-
SHA1
4a25798bee301f4e021ad8c521300b5adc2b8250
-
SHA256
c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661
-
SHA512
e2189bdc9bb94b88bd39d578f4eb63d5a5bb67dd0d47b52d7017ab453726fe7ae068d9741fa3b985fa2cff2472035cac670697b815af668bb9aed46a128b5414
-
SSDEEP
49152:Zu89M2GKnlX6WxmchZheq82m0XT5XzBh1:VrQchl00D5j/1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe Token: SeDebugPrivilege 2060 c0405acb861ddb7edd050c97bd4d5aae9ec089c9dd54adf721dfbc842ebb1661.exe