Analysis
-
max time kernel
150s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
01-02-2025 01:56
Behavioral task
behavioral1
Sample
e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe
Resource
win10v2004-20250129-en
2 signatures
150 seconds
General
-
Target
e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe
-
Size
1.4MB
-
MD5
d33a4236bc425870e7e08c5bcc095682
-
SHA1
a5adaea02ffa11cbf146ec5f81db04ab1504c46e
-
SHA256
e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1
-
SHA512
1617f4e951295d55c98e89c57867533d36745d43453c532f1629c81421154145c6e7032e6af4f49b2e010d7e9cf28817e7abaf8329db5d3823ec3cc37e77211a
-
SSDEEP
24576:YlIFWm3UdC7AVOnrl/6aucZnCDFrNTDSDx+yat:7k1VqB6yZnSf1t
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1940 e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe"C:\Users\Admin\AppData\Local\Temp\e06abddbb7c996112eddf111c3b097778f97c115b784c97092bbc0aedd4fa2f1.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1940