Analysis
-
max time kernel
150s -
max time network
113s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
18-02-2025 13:52
Behavioral task
behavioral1
Sample
050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe
-
Size
1.3MB
-
MD5
b9bc022a06f693deeafa188e04de4d1f
-
SHA1
a6c7c01fd087ae1ec052f4110c8f5a678bd13bff
-
SHA256
050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd
-
SHA512
899820f8c3aff130d5900da79e2fdca40b1bf43e5fae1b76a000aa1c854dca974edddbaf474e255dbf083660c996fb78a08b440d32fea567797c876165591864
-
SSDEEP
24576:ZplYF+P0gT6o5LPSSaELhw+4D1eNDSVXT5XAhNGyai:byFA0gT62LWEtwP1eSXT5XAhNG1i
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe Token: SeDebugPrivilege 4872 050d1fa2a6541718fd881354b062e41ee6a10df7bfb543dc362b5c3e9744c2bd.exe