Analysis
- max time kernel
149s - max time network
94s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
11/05/2026, 01:06
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
avarion.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
avarion.exe
Resource
win11-20260130-en
2 signatures
150 seconds
General
- Target avarion.exe
- Size 24KB
- Sample260511-bf5ttact8l
- SHA256 01b7dd524ab1a2fbb6f9bf502092891a89758e5863f469fee2acbd8cfc5c217d
- MD5 4842d9270ff567cce80265d86704a317
- SHA1 22e4f88865ec29e887382d5f88adef921eceee9b
- SHA512 ac3f94a5fd75f66684072787c0561e584bf5946ddb9c468a1f7d172245131c625b1851c58cadc2f07599d7dae1899e224b14b5e244d357dbf2dca7fa78cb5866
- SSDEEP 384:6/9AGVoHYIsewXOM0noHFKDUfRjhwJGwSRRhV53cY:6ZVoHPMHIU5mJIX73c
- TLSH T1E5B23C56675A04DCC57753B8C4A31E12C3B2B9282B71A7CF4B91D2560F292E1F87EF06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 5064 avarion.exe 5064 avarion.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5064 avarion.exe