Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
01-02-2025 01:46
Behavioral task
behavioral1
Sample
fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe
Resource
win10v2004-20250129-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe
-
Size
2.0MB
-
MD5
05f416a76dc0e7c1afe86c2613c29d78
-
SHA1
624e8eb350261067443adf49817c5a72b7f9d80d
-
SHA256
fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695
-
SHA512
3b5aa3a9580cbff264f7e04e7207948e08fa46d62fa3425a50ade91772e3d60ca2096adc5f091f09aed14d1a855ac221f271a22c3795447fc8711a816642c7ce
-
SSDEEP
49152:AVImnP3ObryxvZcaS39o1LsWO4iaXT5XeM1L:A8OOaS36D5r1L
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe Token: SeDebugPrivilege 440 fcf89751a780aae3a97bc528a07e8017a74554b0eb0255ea0a4a026b3becb695.exe