Analysis
-
max time kernel
150s -
max time network
129s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
22-02-2025 00:06
Behavioral task
behavioral1
Sample
e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe
Resource
win7-20241010-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe
-
Size
1.7MB
-
MD5
2dd8529ace5931380292af80cf725d24
-
SHA1
6f37a60dff5199605b0a5906af00171436c206b3
-
SHA256
e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0
-
SHA512
da1dbb3b22d52389a4a4b658dc2a8339bdd2900cee2ff35fb4b977e72071c3e9f986212e1184f6eb1c7660b9f025cce758807f9879f654e076d6d58ba4c076b9
-
SSDEEP
24576:5W0Wgnam5hmEWkmgcOWsx1eIWWOJQpC2L/FaAHrW5DSVXT5XkIsxya9:5WtmuEvmgcO1DP62rFaAHrbXT5XkZ19
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe Token: SeDebugPrivilege 820 e7872818b5988bdd001cbc1a3e72497418cf4a3f26c59f07fac1ff30f4ad56e0.exe