Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260130-en - resource tags
arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
27/04/2026, 22:33
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe
Resource
win10v2004-20260130-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe
Resource
win11-20260130-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe
- Size 1.6MB
- Sample260427-2gr78aav6z
- SHA256 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5
- MD5 e460b1ba81aef66d398ecf929e1e55ff
- SHA1 048b587968dd9e7c9e9cba8a7a548a0c5ed054f5
- SHA512 0d553842a427a1bca205fa4fd91fd5c784d532af1fd7ec74b87f10aaee8df93c8dd5497503c8a83d6324744d76f5d03796c15497fd48f1dbb4f15bbfda5b49a1
- SSDEEP 24576:i56lQGx6NPtMGGuo2VBRbl4zI4ZFiUL0xwT7RAcMAkfZdDsPk4vbEQs:i53NPMb2zRblmIOMWeadkhdDsdbRs
- TLSH T194759E17A6A840BDE0B7D1F8CA778943D772B80607319AEF07D0A6662F17AD44E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4012 3d0c5a8321e74eca841220778862b93e8833a1656b34480cda596ca1a0fa2da5.exe