Analysis
-
max time kernel
164s -
max time network
178s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
19-10-2023 17:23
Behavioral task
behavioral1
Sample
5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe
-
Size
1.6MB
-
MD5
807f44b71cf029e755a22c56b503f51d
-
SHA1
53ed08485de352e14c554147b4c909c9ad0959fc
-
SHA256
5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f
-
SHA512
3241deae6e51cab0353f92a8bc3ada5ec8eabc1166bc856f1905652900ccd5ac797ace48926d58f2b0be02271f4e95b10608ba8cc5ef2597d1666ac4f937e437
-
SSDEEP
49152:SJoeWVP/PZm8RQB8otH9Fk4Y37XXT5Xja91:IG3Bj88UdbYbD5Ta91
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe Token: SeDebugPrivilege 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe