Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
02-02-2025 20:06
Behavioral task
behavioral1
Sample
e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe
Resource
win10v2004-20250129-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe
-
Size
1.3MB
-
MD5
00b185c82a0ab2a67325d80cf73fba25
-
SHA1
de2da5d3e1898653cc2312e356d27dfc02186760
-
SHA256
e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4
-
SHA512
37270231b6056defe3ad800e0bf5ce20194874a75d612e5aa890df4a0b0908f10ce45117e506263b2eae001f6e3abb631c927765abdf725bdffc3436207a7c6b
-
SSDEEP
24576:ZplYF+P0gT6o5LPSSaELhw+4D1eNDSVXT5XAhNGyar:byFA0gT62LWEtwP1eSXT5XAhNG1r
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe Token: SeDebugPrivilege 916 e1a3839a217246b02dd43a7456f792dfced3cff5174f8460d1544d198db268f4.exe