Analysis
-
max time kernel
150s -
max time network
119s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
22-02-2025 13:01
Behavioral task
behavioral1
Sample
37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe
Resource
win7-20240903-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe
Resource
win10v2004-20250217-en
2 signatures
150 seconds
General
-
Target
37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe
-
Size
1.7MB
-
MD5
d468ab385b159045aad3e3977971cb15
-
SHA1
b687a46f065b0a3ba6cbffeb52e7c89768ad0414
-
SHA256
37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f
-
SHA512
ff08473cbad93c68e833e5b8086c7871e87b65daa8d0c2c068808bb1bf22589711d878775907c030ed1710ec98e652d507b05d9cf3d806ed1a164fb5294cca49
-
SSDEEP
24576:5W0Wgnam5hmEWkmgcOWsx1eIWWOJQpC2L/FaAHrW5DSVXT5XkIsxyap:5WtmuEvmgcO1DP62rFaAHrbXT5XkZ1p
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe Token: SeDebugPrivilege 2104 37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe"C:\Users\Admin\AppData\Local\Temp\37e705f60ad7cad2da1f1a7579f2d27bfad2202102d55183c7972e29b0aeaf6f.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2104