Analysis
-
max time kernel
150s -
max time network
156s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
03-03-2024 03:36
Behavioral task
behavioral1
Sample
bb15d0c336f73fc9c8fe1d675a218fb9.exe
Resource
win7-20240221-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
bb15d0c336f73fc9c8fe1d675a218fb9.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
bb15d0c336f73fc9c8fe1d675a218fb9.exe
-
Size
1.3MB
-
MD5
bb15d0c336f73fc9c8fe1d675a218fb9
-
SHA1
63038db54838ec0eceb917e56d69c1a024096ca6
-
SHA256
ba851696e371fb5168687c362a74bbca8f3a09fa5b7999f9c7b5294b39f2e92c
-
SHA512
b12efc97b52eb0b7a21f85bde1c53ba0e239a870be4ed83a45c579bf67e2533d90db7f484704ac4f91730a752393fdf3fafb18a28eb75b10dfda29288672d3c2
-
SSDEEP
24576:DbsT8+hPULj6gh0yXGlkDXbhAFGvy6PNDSVXT5Xdqt3ya:vGhPULjXhBXxfhAFGvAXT5XK1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
Processes:
bb15d0c336f73fc9c8fe1d675a218fb9.exepid process 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
bb15d0c336f73fc9c8fe1d675a218fb9.exedescription pid process Token: SeDebugPrivilege 628 bb15d0c336f73fc9c8fe1d675a218fb9.exe