Analysis
-
max time kernel
150s -
max time network
124s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
02-02-2025 20:44
Behavioral task
behavioral1
Sample
dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe
Resource
win10v2004-20250129-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe
-
Size
1.6MB
-
MD5
62f82921b70d5d2a135231019c880ddf
-
SHA1
7e56cb64f07ff82481edaa8d776001c0a0077fff
-
SHA256
dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b
-
SHA512
0fe59d14a3eefcfa0803bbac20723f91a45920e0d56ad00ef9497d1727e8128c543b1768c7c4856cc9759fd8993cf0d49d4c435768b3c065a09a71ee257174b8
-
SSDEEP
24576:r0yOdKnqj9MNrOoThmBZTsl3WaPECkDtGQjnEd7DSVXT5X1hni:gSqj9MxOt83J/kwonPXT5X1hi
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe Token: SeDebugPrivilege 3444 dee51b2861f4fa5a523a7baf41c78c54778748381ac89a80437205205320482b.exe