Analysis
- max time kernel
150s - max time network
150s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
27/05/2026, 08:37
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe
- Size 1.6MB
- Sample260527-kjmbbabx21
- SHA256 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986
- MD5 33e1d5f8ac8cac22ea59d5e00a2126d0
- SHA1 69117a4b7139852059263c2a92afcb38adb42938
- SHA512 2fd5013a56085243361a18d851308c8d59bf83e30e92204181945c4967a92e1439728b6df003aab21fedaacea949b9c511aa82d3d3419df13f6b0f838bd19096
- SSDEEP 24576:biolOG/u74oVt7Vq/pnQFBkXp3h0uKVkaEdgH4klPeGoBtEQs:NzpOt78QFBkRSxPJvYRs
- TLSH T132759E12A6A901BDD1B7D1F8CA278906E772784A0730AFDF07D066672F17AD44E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4812 bcd67426d02b9c4fc4bd4c706500e8f7b2452d943cb37a78a5f02a7c6b5cd986.exe