Analysis
-
max time kernel
150s -
max time network
147s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28-01-2025 05:46
Behavioral task
behavioral1
Sample
b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe
-
Size
1.2MB
-
MD5
c896cd4bfa429fa111dca8bb5f028f96
-
SHA1
72224a7ea5938d2ea86d8aeb6cee55abaf61df98
-
SHA256
b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c
-
SHA512
2050e502ed1f6b96b65eb4f195a9842887b3c369d3ae7d38a96186aeeed188cdce13abf89cda9e5c382029df3dbcb22ddb47babcb1de3010458dfc9cc4e960ac
-
SSDEEP
24576:HqgTM8/TP5XsxDzwHhCeiqKl6lKiWj3MryahDSVXT5XQ:HjTT/TP5cxDze2qKjE1GXT5XQ
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe Token: SeDebugPrivilege 3780 b4ccdd7f43f6cb6bac4d1434edd5aa7c0ec4e71d7380de53d424d24c315f9c1c.exe