Analysis
- max time kernel
150s - max time network
156s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
20/03/2026, 17:05
Behavioral task
behavioral1
Sample
7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe
- Size 1.2MB
- Sample260320-vlthhsbz2r
- SHA256 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef
- MD5 ebcf1ea09f31713a97a1c5e0d9c51cdf
- SHA1 6b9c79e23cf54a7b68d9d36e98f8f6af1e2708d6
- SHA512 0b8e1d22f64c2003eb72d76dabc7c1222d0967c26e118e5a902418ed70c01845a5046d0f431d678a715388116a23299aa2a66bf0afedd84e864b848de347fd0a
- SSDEEP 24576:FYUrQABbyYRTRyJYzOuA47p03qgGKpigjU8K5KVIDSSPcm4bJ7K:jMABbRtyUlpF8KVKV7K
- TLSH T1F455BF4667A404F9E0A79138C9538D06E7B2B8060771DBDF13A0877A6F277E15E3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1492 7a8004afafd5a81ffb256fed047585e3a15e4d33916601de9d4c5448752b4eef.exe