Analysis
-
max time kernel
150s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
04-02-2025 04:44
Behavioral task
behavioral1
Sample
45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe
Resource
win10v2004-20250129-en
General
-
Target
45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe
-
Size
1.6MB
-
MD5
12098871db5c2237e2fb4c347c86758f
-
SHA1
1698b4d20c4bb0e1bd0acff2e4982ab71c8cd31a
-
SHA256
45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2
-
SHA512
925e9bc37e491699987f82b2719ff52114bdb889c2cf2aba0da1a6eae16f1eed4735c1e538d84ea8a08cd963fb9311bf5f15a902df28e7e4d80785dd3a794a43
-
SSDEEP
24576:VeOCnoITBKtKUFIb99eESRh0ME23JMKOuTlqLoA6D6IVPx7JDSVXT5XOt4eSyaa:Vmy0V2ZMKOY31PxKXT5Xug1a
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe Token: SeDebugPrivilege 1100 45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe"C:\Users\Admin\AppData\Local\Temp\45c6331e2e769c5f9b5290435838b220af764de29a6bad92eb1ce15affe6bdd2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1100