Analysis
-
max time kernel
150s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20250313-en -
resource tags
arch:x64arch:x86image:win10v2004-20250313-enlocale:en-usos:windows10-2004-x64system -
submitted
10/04/2025, 13:48
Behavioral task
behavioral1
Sample
aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe
Resource
win10v2004-20250313-en
windows10-2004-x64
2 signatures
150 seconds
General
-
Target
aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe
-
Size
1.9MB
-
MD5
73f1b95f945aff8696f58ea28f39e4e5
-
SHA1
0c73fae2e4735f8932253b934e61a7f5b2282cde
-
SHA256
aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c
-
SHA512
4998d697bb3df1cd17b033adb238a2e36173999b136d4c03584364db7fe4fe00dfa64d1df2a17677e0f0498eae6f41f4c43377169963de56fc855cb1032a2c3c
-
SSDEEP
49152:Wgil3OghBQ0xbWXqjvd/+wNg9cMpbigrXT5Xeza1w4w:lQ2qjDg9cMNigrD5/17w
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe -
Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe Token: SeDebugPrivilege 5456 aedee86bc8aa9ec74f6b7aff4befb4046c948281832abf682c969f062484061c.exe