Analysis
-
max time kernel
150s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
01-02-2025 10:55
Behavioral task
behavioral1
Sample
a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe
-
Size
1.4MB
-
MD5
bf6875d231b09a806d47a81be0dcb790
-
SHA1
d64fbc6c9b6c7660ef9c124fb0700d3d78018aa5
-
SHA256
a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376
-
SHA512
74596d833b98948c980c481f2582c56a89a735eec6e2fa959e0c66e2feb7b1420e97dab695e0dd96d0b0e621bfbdd08d02cf5f57496083cc61aae90e3666677d
-
SSDEEP
24576:bQdnyqwGxVsxD9m02dT4hqJDDfyNYpXDSv5bJ72:WeGHsxxmNEhq9qNYp+V72
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2640 a521eef15e1ba065f3db0b056affe11b345e016a4243c0505f6fa5fe7a7a7376.exe