Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231025-en -
resource tags
arch:x64arch:x86image:win10v2004-20231025-enlocale:en-usos:windows10-2004-x64system -
submitted
26-10-2023 18:27
Behavioral task
behavioral1
Sample
ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe
Resource
win7-20231023-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe
Resource
win10v2004-20231025-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe
-
Size
1.9MB
-
MD5
1bbdbe703efee8be584995e2e3251b1c
-
SHA1
46b1db4c7b3ffb03e2cd7111fd29cabc239649d9
-
SHA256
ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525
-
SHA512
9d516ef36898c7246b35be15ac03160ee8b7eb06794d45ca3212c3260a77348751b8179d11ce4f5dfba09e79b98504287386bf4f2cdee031acdb536fd2c5d457
-
SSDEEP
49152:VsupYWppKBYXwbC24I1ZIEMziqp4SwWXT5XHL1:TlXZ2FDkiqCSDD571
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe Token: SeDebugPrivilege 1776 ffe9c7c2a17973d52cfec78677cb7fe6b0a58f7f8a1494c2c3b703cecc2b9525.exe