Analysis
-
max time kernel
153s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system -
submitted
08-03-2024 21:02
Behavioral task
behavioral1
Sample
98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe
Resource
win7-20240215-en
windows7-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe
-
Size
1.8MB
-
MD5
4a2bfc16cadac0447ee875e4cad79e11
-
SHA1
c6064db0e40204dd4419e6c7709c415104dd09ea
-
SHA256
98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1
-
SHA512
6439b30696fa4a63c6e4ac4daa9a307f1e34b5ca17855f061c42d9f85d6032647b8009a2d38fb7654a60ca90dedef97d4b6886bed0ec04bf26043fe3d441c222
-
SSDEEP
24576:URy3ZjHSD9G5qeVohy1ubyOvSYL53q1ynvegDSVXT5XRzB4sya9:zZ+45qeihy1umO7Lg1seVXT5XMs19
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5020 98394b6164f119a5997750fae6effec043df01ef5c7401a1176b1b8d9fe0b6f1.exe