Analysis
-
max time kernel
151s -
max time network
135s -
platform
windows10-2004_x64 -
resource
win10v2004-20230915-en -
resource tags
arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system -
submitted
20-10-2023 03:19
Behavioral task
behavioral1
Sample
efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe
Resource
win7-20230831-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe
Resource
win10v2004-20230915-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe
-
Size
1.3MB
-
MD5
2170785c7eb5c968efe42e9ea79c0ad0
-
SHA1
e343b8b118604863ed351ffbe8d2f6215c6fbc2a
-
SHA256
efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35
-
SHA512
09af2f7152f7f4942c917bc281ff873403bb270753186de628165935bb9a6dfb6e919c48007cabeff1c7952f87fb8f3f9bf494b6deb57a19fe1416dcaba178d6
-
SSDEEP
24576:iXAyA7/TjNuExdKoHJq56WdTDSVXT5XTKEO35Ysya:QxA7/TjNumdE6WmXT5XexJT1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe Token: SeDebugPrivilege 2980 efdd73d714234eef6a62bf86eea383013d5df0aa1ab7795e9666478da29bfb35.exe