Analysis
-
max time kernel
160s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system -
submitted
25-12-2023 11:37
Behavioral task
behavioral1
Sample
a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe
Resource
win7-20231215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe
Resource
win10v2004-20231215-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe
-
Size
1.3MB
-
MD5
09eddda58cfebe3c47fb82d17f902432
-
SHA1
c0e9feb9232323e97c2fc7a73dc6d36894907a70
-
SHA256
a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963
-
SHA512
e9ba3457b628e174212906c8f9d8377089b09897c9bafb28e014c9f739a1c0ae1d4666170b90f52d1ffa9d0024edda142c2355321f1af36aedadfe27155bdda0
-
SSDEEP
24576:Bhhjuqpe3kP4mYwVoiPYq/a+K/4XfXeNKFyakDSVXT5XVAMg:5juLkAmFVoIYq++0KF1pXT5XVAMg
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe Token: SeDebugPrivilege 3852 a35b645f0726885694d3999eb88197a5ba1d070e5091f2d7aad3999c29c20963.exe