Analysis
-
max time kernel
150s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28-01-2025 21:46
Behavioral task
behavioral1
Sample
f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe
-
Size
1.3MB
-
MD5
c43a9d0651222a81d6ee09158ba3c86c
-
SHA1
c36b5dfd27d45aff179fd6223054c4fa94561f12
-
SHA256
f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc
-
SHA512
ae72171669f91bc9b08906fa0f44ab0090a4fe04cb27346c193608fce1d76b59d04df117840563970600a564bc99a917b155055570af8a1c1f87b8016aad98dd
-
SSDEEP
24576:d63Up6zQpwzJhTs6oz44x5xBHylYxbJ7oDSrHJj:7SQSd1s674/xrxV7Dpj
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2448 f42fce546543ba52b02cda7fb3b98a7996a311ea5e068db7ca7119c709986efc.exe