Analysis
- max time kernel
164s - max time network
178s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
19/10/2023, 17:23
Behavioral task
behavioral1
Sample
5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe
- Size 1.6MB
- Sample231019-vyb41ahe2w
- SHA256 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f
- MD5 807f44b71cf029e755a22c56b503f51d
- SHA1 53ed08485de352e14c554147b4c909c9ad0959fc
- SHA512 3241deae6e51cab0353f92a8bc3ada5ec8eabc1166bc856f1905652900ccd5ac797ace48926d58f2b0be02271f4e95b10608ba8cc5ef2597d1666ac4f937e437
- SSDEEP 49152:SJoeWVP/PZm8RQB8otH9Fk4Y37XXT5Xja91:IG3Bj88UdbYbD5Ta91
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe Token: SeDebugPrivilege 3120 5cd31b6b03a0f88a9a7f352b2601cfc29556d0d62f494e8b2d2c5a159e9edf3f.exe