Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-01-2025 22:46
Behavioral task
behavioral1
Sample
e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe
-
Size
1.7MB
-
MD5
b0d1610167c0d2ad9817f5c74bef91d2
-
SHA1
8a729dc3c2781d1d3b30548745780ea1ede7c75c
-
SHA256
e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746
-
SHA512
c072dc42a78460c1acd64c7219d9907a12118f07691acf78f3f68a3dc8df7f82a4b77a1e68cb3f8f8500a741527446d1f7e5397e740499a8b4b79ef0d2c76ec2
-
SSDEEP
24576:vmQn8AtHx3OXiORxXpv9aRmqZhm9tChfKsKNDSVXT5XUjlkyaZ:vm8tHAXV3Xp2m6h0UfKszXT5XUjG1Z
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe Token: SeDebugPrivilege 2452 e015274cff8b318266bad1efe40a58ff324f019bba7e33020611588bc43f6746.exe