Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
02-02-2025 15:11
Behavioral task
behavioral1
Sample
dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe
Resource
win10v2004-20250129-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe
-
Size
1.1MB
-
MD5
96607a076c9a521d69791151572eb499
-
SHA1
c13fee4b3508c547652eb6a654650968fdc353ff
-
SHA256
dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9
-
SHA512
7acd7f3f6313fbd4bc068e4e1da08747a9ccba5dd2e2fe05295d7a086a324ebb9b4cfc4fb88c299e51555ab503266cfc360032c50735453b6b918ae618914f30
-
SSDEEP
24576:w2UlQci3khFwLhaOUYo8N3ZbXBFO5ZDSiTbJ7h:WGfaw1aOU/orFO5tV7h
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2576 dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9.exe