Analysis
-
max time kernel
150s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
25-01-2025 09:46
Behavioral task
behavioral1
Sample
13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe
-
Size
1.7MB
-
MD5
3ac08048c345dc419fb1a764c45c7a18
-
SHA1
314fe6814e53aef6e27ec4f496c80a08fc6b30b9
-
SHA256
13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b
-
SHA512
8f2bf3f70c2e1df54cf7eb1b29b298cef9348bde5b6f0849d8a6b82371f87326a9265244ca699bcbc46431b0a056fe16245dee2a3301ce7cd39c3119da5dd3f1
-
SSDEEP
24576:5W0Wgnam5hmEWkmgcOWsx1eIWWOJQpC2L/FaAHrW5DSVXT5XkIsxyaL:5WtmuEvmgcO1DP62rFaAHrbXT5XkZ1L
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe Token: SeDebugPrivilege 1764 13f64597c1dfceaf391bbc7a46552f77164c02468f17e08eeb026e1f7365e62b.exe