4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e

Analysis

max time kernel
150s
max time network
141s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
03-02-2025 12:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
Size

1.3MB
MD5

cc590f73f452298a5c01b0165e0d8383
SHA1

7501f6f678eba1983a11e90f8282d633978ec5a9
SHA256

4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e
SHA512

dcef7034b12ffd37332daa9c3dff6a4a879f443f21cdea9ceb2f813c3b31e31fbacfd08d0d41f3f93019be80df47a3997ffb3a9a24328631cee0904ebbd89320
SSDEEP

24576:r2qLfk7bTs2/PwjKYR8ASIBwhWODDSIQXbJ73:KpbTv/Yr8xo6QXV73

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2020	4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe

C:\Users\Admin\AppData\Local\Temp\4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe
"C:\Users\Admin\AppData\Local\Temp\4ad65d6ded34cbe67ccf732adf4b2c5b92aa7b3533f5a71a32859bec9aad5b9e.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2020

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2020-0-0x00007FFA73F03000-0x00007FFA73F05000-memory.dmp

Filesize
8KB

Download
memory/2020-1-0x000002CB14BB0000-0x000002CB14BEE000-memory.dmp

Filesize
248KB

Download
memory/2020-2-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-3-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-6-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-8-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-9-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-21-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-22-0x00007FFA73F03000-0x00007FFA73F05000-memory.dmp

Filesize
8KB

Download
memory/2020-23-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-24-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-25-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download
memory/2020-26-0x00007FFA73F00000-0x00007FFA749C1000-memory.dmp

Filesize
10.8MB

Download