Analysis
- max time kernel
152s - max time network
140s - platform
windows10-2004_x64 - resource
win10v2004-20230915-en - resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system - submitted
20/10/2023, 03:16
Behavioral task
behavioral1
Sample
189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe
- Size 1.3MB
- Sample231020-dsx1vafb59
- SHA256 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb
- MD5 94979885390ab9b4fc70f48065b675e2
- SHA1 e697470954848dc3c87f0a7d818a77554ceb8897
- SHA512 4c0cb87bc40070d9b50f31ca801f636c87c6e72dcfa4a63ff76900783e5da73d385255f914fc9cebd86f722f1a05ebf1233fc2b16fa7403f0762a5bb42d896d5
- SSDEEP 24576:TcQSP7j/UO4VAKxnAeBxLkO824n3KDSVXT5Xjpq+ya:TSP7oOiAYnCO8R3fXT5XA+1
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe Token: SeDebugPrivilege 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe