9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
25/01/2025, 00:46

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
Size

1.3MB
MD5

81e789f16209ac09e6111479e4ff2a00
SHA1

19ee8f6debdeb89933376b7b06ffa87030d829ba
SHA256

9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba
SHA512

3ff159693c14d4a7d46879f7040e1c093f969260b4808133f60a97fc74ac9128c42333698df94bac33555fdf08176cc02e19db30db2d0b546e68c8d656ad0b93
SSDEEP

24576:UnXrUf+HEwwO6/DKFe52RUBX0OwcDSVXT5X4digf3kyaC:KXra+8O6/DGeo9RXT5X4dr3k1C

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2604	9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe

C:\Users\Admin\AppData\Local\Temp\9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe
"C:\Users\Admin\AppData\Local\Temp\9acf94fb5bfd6d258243ac8ec75d31cee9526acaaa9c9cfa75eb11b5b59e59ba.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2604

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2604-0-0x00007FFBBDA03000-0x00007FFBBDA05000-memory.dmp

Filesize
8KB

Download
memory/2604-3-0x000002053D050000-0x000002053D084000-memory.dmp

Filesize
208KB

Download
memory/2604-6-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-7-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-8-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-9-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-10-0x0000020557690000-0x0000020557698000-memory.dmp

Filesize
32KB

Download
memory/2604-11-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-13-0x00000205576E0000-0x00000205576EE000-memory.dmp

Filesize
56KB

Download
memory/2604-12-0x0000020557710000-0x0000020557748000-memory.dmp

Filesize
224KB

Download
memory/2604-26-0x00007FFBBDA03000-0x00007FFBBDA05000-memory.dmp

Filesize
8KB

Download
memory/2604-27-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-28-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-29-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-30-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download
memory/2604-31-0x00007FFBBDA00000-0x00007FFBBE4C1000-memory.dmp

Filesize
10.8MB

Download