Analysis
- max time kernel
151s - max time network
155s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system - submitted
18/12/2023, 11:07
Behavioral task
behavioral1
Sample
09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
- Target 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe
- Size 1.3MB
- Sample231218-m723saabcl
- SHA256 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2
- MD5 d9859e9eebc0aff762570ed16bab695e
- SHA1 99642074ac1fd217bbf481c60d91f3b6d362beb7
- SHA512 e4bc9ddeb862f686be0df83c8bfb3d4192352b5bb2ac29b7ff0e61b327e8889cbdfb0749bc13476b90011888512e214372368290356f1df32573b1a92270db20
- SSDEEP 24576:w7JeIlrXu6oaYtM0ZZ44i68yhhIvgrQL7DSVXT5Xyhya:oJhlrXcaKMGZAyhRvXT5X01
- MD5 SHA1 SHA512 SSDEEP
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe Token: SeDebugPrivilege 2320 09e2bed9f8e2b5211157c6d9b326e1b6cb02b103acb74ac5bfd020c20a8f33d2.exe