Analysis
-
max time kernel
152s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2023 03:16
Behavioral task
behavioral1
Sample
189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe
-
Size
1.3MB
-
MD5
94979885390ab9b4fc70f48065b675e2
-
SHA1
e697470954848dc3c87f0a7d818a77554ceb8897
-
SHA256
189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb
-
SHA512
4c0cb87bc40070d9b50f31ca801f636c87c6e72dcfa4a63ff76900783e5da73d385255f914fc9cebd86f722f1a05ebf1233fc2b16fa7403f0762a5bb42d896d5
-
SSDEEP
24576:TcQSP7j/UO4VAKxnAeBxLkO824n3KDSVXT5Xjpq+ya:TSP7oOiAYnCO8R3fXT5XA+1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe Token: SeDebugPrivilege 2228 189bbb4c61683c12a0e1f6aa09c31ea861721f72d645a01b506d69a1fe4014fb.exe