Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
26-01-2025 10:50
Behavioral task
behavioral1
Sample
7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe
-
Size
1.7MB
-
MD5
1162bebd28f3ebee8f16363b04c268f5
-
SHA1
74683760841442ad7d18a7d4b4aa0b41896d130b
-
SHA256
7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c
-
SHA512
f1c4ddec33055d6bdd780b5c2f28f0b0c642df50817d53eb5692e44a71e6e20e0dd402034551e80be19cc3ac663fc83638d4989c72b5920de008d207abb747b7
-
SSDEEP
24576:vmQn8AtHx3OXiORxXpv9aRmqZhm9tChfKsKNDSVXT5XUjlkyaQ:vm8tHAXV3Xp2m6h0UfKszXT5XUjG1Q
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe Token: SeDebugPrivilege 2612 7ba917f33035a91756dcd5d4812314af445e10abad4bb213b8c530f7521d479c.exe