Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02-02-2025 04:58
Behavioral task
behavioral1
Sample
341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe
Resource
win10v2004-20241007-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe
-
Size
1.9MB
-
MD5
3b1a3297973bc155a65cef40c038a5f4
-
SHA1
406db17082d990bb948fb5ae0205fee4907e0f9a
-
SHA256
341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57
-
SHA512
3eddcd65400d56f5e48e1390f045da6a5ad14d8b9efcce0886c13f6c723a93916b1e10c992bda4c64947cbed57e8faf856fc701c87e9a44d743d476eb3769616
-
SSDEEP
49152:Wgil3OghBQ0xbWXqjvd/+wNg9cMpbigrXT5Xeza1w4X:lQ2qjDg9cMNigrD5/17X
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe Token: SeDebugPrivilege 1804 341a7984fcf2a54fc849d35a15fc3e0294e252eb7e9129060e4c11d756860f57.exe