Analysis
-
max time kernel
121s -
max time network
19s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
09-10-2024 05:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe
Resource
win7-20240903-en
windows7-x64
3 signatures
120 seconds
Behavioral task
behavioral2
Sample
341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
3 signatures
120 seconds
General
-
Target
341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe
-
Size
3KB
-
MD5
18d5dd3e7e96b3897338e7b53534c880
-
SHA1
9e18a196527f512954b370358f9b4594b00a6f20
-
SHA256
341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139
-
SHA512
f84958cad9497737e7e1942d5c76b49d3a00b0be38569bf8622d1a01614680567d7ed31f1b3183d64e0341a33a519ea4759018b41019fbaa121ff4e739159165
Score
3/10
Malware Config
Signatures
-
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 984 341dbb7aa6de667578a13ae6c7373852a3aa906ff663da40fe4abe9045143139N.exe