Analysis
-
max time kernel
156s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231020-en -
resource tags
arch:x64arch:x86image:win10v2004-20231020-enlocale:en-usos:windows10-2004-x64system -
submitted
05-11-2023 02:51
Behavioral task
behavioral1
Sample
94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe
Resource
win7-20231020-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe
Resource
win10v2004-20231020-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe
-
Size
1.3MB
-
MD5
bc28c38f1327fc837244d5dd3e14b851
-
SHA1
7b8068e4ed077b057fb2ceec2354ec9e99f9215c
-
SHA256
94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b
-
SHA512
974af16ee5d7799e2309aca5e6386a0107263fe15d10fac75eed9ec8fb76fbe3e08672e7dbebc5850c3399c98746afe868a63797fb30e71a3048fc1faed61962
-
SSDEEP
24576:2q02HVhoP2tRxIANrvqROnU7d/JDSVXT5X3KUE/ya:zVhoP2tRKAG7d/eXT5X361
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe Token: SeDebugPrivilege 5088 94b1cd0a3b3dc2897c10cbc2836accfb3c62bc07755f7cff159ab820cff81f2b.exe