Analysis
-
max time kernel
150s -
max time network
63s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02-02-2025 21:44
Behavioral task
behavioral1
Sample
99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe
-
Size
2.0MB
-
MD5
01f7f080571b33072a6da39c6a15e795
-
SHA1
c557f13332cdfa676b3e4714fca710df8ebcdd61
-
SHA256
99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac
-
SHA512
3ac50d5c00ecb5156e113039a8c6f763f34bd8020c7b7ffb3b73f83d875fd323af18609d971c215031e9a1831ea2bb06ba4c73e2d390f45391e73ef382dd3a78
-
SSDEEP
49152:AVImnP3ObryxvZcaS39o1LsWO4iaXT5XeM15:A8OOaS36D5r15
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe Token: SeDebugPrivilege 2172 99f5e4dd00a73e8aa163b8504b2f0b93cd9e85e237e34ea241345f7b990dc7ac.exe