Analysis
-
max time kernel
150s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20250217-en -
resource tags
arch:x64arch:x86image:win10v2004-20250217-enlocale:en-usos:windows10-2004-x64system -
submitted
01/03/2025, 13:06
Behavioral task
behavioral1
Sample
2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe
Resource
win7-20240903-en
windows7-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe
Resource
win10v2004-20250217-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe
-
Size
1.7MB
-
MD5
7ebd0548ff4e5cd16b1d836860668919
-
SHA1
4f7197c526eee8eb2b8ea7805deb465e5b738e56
-
SHA256
2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5
-
SHA512
0a23429e7abeff6cb50e550918afb6fb4a4b3655ab60a1abe91e3c5ee13201fea4cb898ab7e28f76015e04608a2e7fd14aea40c03be2f0c9c85f982eb35079f4
-
SSDEEP
24576:5W0Wgnam5hmEWkmgcOWsx1eIWWOJQpC2L/FaAHrW5DSVXT5XkIsxyaB:5WtmuEvmgcO1DP62rFaAHrbXT5XkZ1B
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe Token: SeDebugPrivilege 1292 2379fd7d6aa00e46af70be5a78c5a9ef893f4f60b634313affaaf1fe391114a5.exe