Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
02-02-2025 14:07
Behavioral task
behavioral1
Sample
5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe
Resource
win10v2004-20250129-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe
-
Size
1.9MB
-
MD5
b63fb722e40e8041e24e4aa92278822b
-
SHA1
fd3d33fd2f1fb2745363063e27d27665d7b0bcc4
-
SHA256
5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877
-
SHA512
7263bbd4144738b51797f091de830b435aaf70c53fb4e85b032a3d9ea87c402b2e42f1d8f8e23401ecffa1a41c204c76c10dcbb2c6b90567489252f75f8a6e09
-
SSDEEP
49152:Wgil3OghBQ0xbWXqjvd/+wNg9cMpbigrXT5Xeza1w4D:lQ2qjDg9cMNigrD5/17D
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe Token: SeDebugPrivilege 1576 5dfe19e30605a38f64e96b59e6841e5ae8e29675cee30c6f51bcf0cf90cd4877.exe