Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows10-2004_x64 -
resource
win10v2004-20231130-en -
resource tags
arch:x64arch:x86image:win10v2004-20231130-enlocale:en-usos:windows10-2004-x64system -
submitted
06-12-2023 18:18
Behavioral task
behavioral1
Sample
996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe
Resource
win7-20231201-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe
Resource
win10v2004-20231130-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe
-
Size
1.9MB
-
MD5
fae16f4150fbb4256a5b4448c090e38c
-
SHA1
c4d831f56c577aeeecd0ff35353a1fe4513a6a50
-
SHA256
996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e
-
SHA512
3835e6e50a0bb8a915ba5310af3426464f8a00d507e98f07482986ad7574e93bb0fe1eb261c4712213c954488edcaf09b4d15417a45a8c509001ed03dd549af4
-
SSDEEP
49152:heeKdme4AFDw2Y9K9V9JtCaXT5XJCVU4I1:JYDpY9CpD5ZCxI1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe Token: SeDebugPrivilege 4700 996f378e38ceb9a61f262edd90b16a3cc1bfed1f9cc027f953c509827b4e736e.exe