Analysis
-
max time kernel
10s -
max time network
12s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system -
submitted
09-08-2024 22:54
Behavioral task
behavioral1
Sample
Welcome to ParadiZe v20240305 Plus 18 Trainer.exe
Resource
win7-20240704-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Welcome to ParadiZe v20240305 Plus 18 Trainer.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
Welcome to ParadiZe v20240305 Plus 18 Trainer.exe
-
Size
1.8MB
-
MD5
95398b05aef4d0a1129076bc7a065ca6
-
SHA1
0a64d718b1b1c503acb87a40d4702d4a5694cd65
-
SHA256
9f8aa22aefec636321afd5975a716cce7e0c473ccd392e6e8540f3e62eeabef9
-
SHA512
230104baa2088c39b172b8a99a16a445a15c5fad1560ad5b54c88738c2847655b978a8a57bd2c71d7e48fa165cc4eb70a32c158443cc7ba54f654107b883dad7
-
SSDEEP
49152:XnQPnAzQWU5C7CXbR+cxMXT5X1C1vJFF1:XceQh5I0xMD5lC1vx1
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 40 IoCs
pid Process 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe Token: SeDebugPrivilege 2276 Welcome to ParadiZe v20240305 Plus 18 Trainer.exe