Analysis
-
max time kernel
150s -
max time network
125s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
29-01-2025 17:46
Behavioral task
behavioral1
Sample
2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe
Resource
win7-20240708-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe
-
Size
1.4MB
-
MD5
ae301a42af47ca06e1ffc61f2d2b469e
-
SHA1
266c4327e7f9514f7220b05fd4219269727a0e90
-
SHA256
2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61
-
SHA512
096f181c328c1dc58212888211d1cc5c8891d3759ee990a45f45109dfd22a87b742a29efe60e2a5a355068dcfb0551704b349f23c011e772abc10a98058a600a
-
SSDEEP
24576:YlIFWm3UdC7AVOnrl/6aucZnCDFrNTDSDx+yab:7k1VqB6yZnSf1b
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3440 2e3f54ce71e7795ac1e5ac69f99f60885a0c06ccb63d62eb2ef4a309a38cea61.exe