Analysis
-
max time kernel
150s -
max time network
133s -
platform
windows10-2004_x64 -
resource
win10v2004-20250129-en -
resource tags
arch:x64arch:x86image:win10v2004-20250129-enlocale:en-usos:windows10-2004-x64system -
submitted
04-02-2025 11:45
Behavioral task
behavioral1
Sample
ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe
Resource
win10v2004-20250129-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe
-
Size
1.4MB
-
MD5
d06d72131649a5e466eaa8a59fbc459b
-
SHA1
b250884a18666d623707f376e7d8ce9ae2de4e35
-
SHA256
ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6
-
SHA512
9e00790d2b491b7346ac048a9cccd66c36635fdae545ed3b6735ea4cefdc8b4061137f63ae07e7719cac8cf723b3fc190eb7976bf2171784bbffdb2089adf6e1
-
SSDEEP
24576:8tFS4j1cVPdZ8bBHeNxfMCrMhvHyZkno8DSdAqKWbJ7Q:eriVabB+NeCANRofV7Q
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2064 ff7476c953bc36914578c116882f485caa86b8cc92e8529ae2d3482dd27f73f6.exe