Analysis
-
max time kernel
150s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/09/2024, 23:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe
-
Size
1.0MB
-
MD5
3b48f66e8aa7c3635d08300601558baf
-
SHA1
91da433260333d28dad029c5525bbd00e3b708dd
-
SHA256
216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44
-
SHA512
32e54babeb265c627f56c8342dcd35d4f823fab29d312bef34f0c56b9da7a742d28a3f55827e55ee5bc7627f192ed23e1e3c8bbd9752cd402036429d5ffb1b01
-
SSDEEP
24576:K4g1C/7BjnYhjBujvGsZfP2Cqa1APtwrEQs:KTEBjYhjkTHfP2C+twrRs
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe Token: SeDebugPrivilege 2996 216d5c1943d2a37e239fb24a08beddca0f955af60f274cd515562ed68b898a44.exe