Analysis
-
max time kernel
150s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
04-02-2025 14:44
Behavioral task
behavioral1
Sample
0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe
Resource
win10v2004-20250129-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe
-
Size
1.3MB
-
MD5
80f262b107a6c2bc6e886a054cde2aa3
-
SHA1
826c5bcdfffc331217115a962b6e114568a62e82
-
SHA256
0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c
-
SHA512
711f9446d0333e7a23423d68948e479e09052b8cc3f936fa6706ecc1b33c010af5e6a950f1167fc884c38bb6a02e2b8b840f1f33591bb7c287d0f5dcf1b2181b
-
SSDEEP
24576:bo1zSSCWiHULGuHiXP3Kzt6sId6tCkgByPlhbJ7rDSLV/:U+Ii0y4ivKZIddByPlhV7o
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2828 0f0cc63f4fd1bf3637a7481258c2b0206970ce9e8ae093aee2b28610d53ba09c.exe