Analysis
-
max time kernel
150s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
25-01-2025 11:46
Behavioral task
behavioral1
Sample
7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe
-
Size
1.4MB
-
MD5
f436e3e2bff57ce27bde55863009abe7
-
SHA1
87c1bea4937859cf3d634f1e2f00a5afe9b121f3
-
SHA256
7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927
-
SHA512
c404d30c41a45d5673cfeb3c32ac09ffb6fca4bb1bfec150ff01164707d4bd79da74a722c76850ae481d66da24178c1718833ba9b321d51ce0f6d270d0d8eb3a
-
SSDEEP
24576:bQdnyqwGxVsxD9m02dT4hqJDDfyNYpXDSv5bJ77:WeGHsxxmNEhq9qNYp+V77
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3252 7cf642a29aff99e94c307f11a4e203607806d9ae08d2f96c6c82fc7feaf3b927.exe