Analysis
-
max time kernel
150s -
max time network
131s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
02-02-2025 18:45
Behavioral task
behavioral1
Sample
0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe
Resource
win7-20240729-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe
Resource
win10v2004-20250129-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe
-
Size
1.5MB
-
MD5
04f03fcf4b4ddf9555e00cc8c5b3f0cb
-
SHA1
f399b7187deb2c162ee6dfbf61c5a9afc410e646
-
SHA256
0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976
-
SHA512
c19deaf71c70a7518d1dbda5878dab0fae123eb2c9086cd7b6b2fa005fea52aa8662d23d731d27acfc30cb46a73c991fad60d9111ad97618f2b2fd6565ec68e3
-
SSDEEP
24576:n/PVLMJEjlYbFdn5dcIjKO/MT8d3hKvDSVXT5Xu/HaFyao:1MJ0YhN5LjKe53hKMXT5XuCF1o
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2064 0f9178eaa084d32099c8aa0c9ba68fc89791f1d9f6ba90022557554558815976.exe