Analysis
-
max time kernel
150s -
max time network
143s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
28-01-2025 05:46
Behavioral task
behavioral1
Sample
a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe
-
Size
1.7MB
-
MD5
ef26cac5ace83ed51d369632bf8b8ee1
-
SHA1
994556135628fe8c0d1b78971d4aa7976a2401f3
-
SHA256
a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f
-
SHA512
b31d980e07ce37c726d3b5fd794fb777e6ecf1a82a5b2d0837aa11ab95dc9e3eb0be71fd66ed97cfa7fb6c13fd79be8b97e59f8baa9e4e84cb44ff250eb59afa
-
SSDEEP
24576:vmQn8AtHx3OXiORxXpv9aRmqZhm9tChfKsKNDSVXT5XUjlkyar:vm8tHAXV3Xp2m6h0UfKszXT5XUjG1r
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe Token: SeDebugPrivilege 4456 a3bfb0c0467add2381d22bb5c3ff21c762f72d38aef9245a79bca8064e9dc79f.exe