Analysis
-
max time kernel
150s -
max time network
146s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-01-2025 08:46
Behavioral task
behavioral1
Sample
a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe
-
Size
1.7MB
-
MD5
b96b55931546e0d8a9cae779214c4ac0
-
SHA1
ed98b9eee6859b804925bce08d9a859e71aa9260
-
SHA256
a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e
-
SHA512
3ab53018f3cef2f7f585c93424d113761bd8abb56876e403e3c26211593331a8c9e31c4a867e3dccb530c92d2af880f1d0fe42857aae058728863db5ce975bcc
-
SSDEEP
24576:5W0Wgnam5hmEWkmgcOWsx1eIWWOJQpC2L/FaAHrW5DSVXT5XkIsxyaf:5WtmuEvmgcO1DP62rFaAHrbXT5XkZ1f
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe Token: SeDebugPrivilege 2624 a9e885010ce396c717c0c2853217c1080e41deb09617e054573cf774b126fe9e.exe