Analysis
-
max time kernel
151s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
19-10-2023 17:23
Behavioral task
behavioral1
Sample
35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe
-
Size
1.6MB
-
MD5
9f99b359668729bc548f34eb41ff405d
-
SHA1
4971b062b8e52f3f8e30620b5b40a8ed7a0fbe5b
-
SHA256
35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189
-
SHA512
29cdac7793747c8a778df7f55435ff50c15086d63fc32b9cf5d737fbd50d354fb0ba2f962f93faae82b59e0780e231fc91f6eca5101539b2a97dad9179c5cb9f
-
SSDEEP
24576:pJJoeWEH+H0Tr2F6NzubQeSjMd8y7PSMyDSVXT5XYeu2ya:pJJJWEC0Tr2ANzubQeLTPSMXT5XY+1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe Token: SeDebugPrivilege 4728 35a0998a81502a37c59997135862ef06e6b83ee41dfa7202908d436051a96189.exe