Analysis
- max time kernel
149s - max time network
152s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
28/05/2026, 12:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4.exe
- Size 2.5MB
- Sample260528-pp7lnafw4m
- SHA256 e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4
- MD5 44abd44b99fb1d707cb6e397598a0a69
- SHA1 4255197e1b7b0e1651cebffe6c6cbb0cf40b708a
- SHA512 4f3487a6acdc564256c07195d9dd2b5aff0c0a0e151fa1a51f36bc60eaa53942f63a6e25f49110fe8722d4560054e4e3d4c8d880e6dedc2e06c3b4598f166665
- SSDEEP 49152:btTFCl/AG2eRSsKlO+VmMaDyG4dP1n3b60HXw/aEdUWez2AUD:ZV1gUO4ZahMJD3w
- TLSH T115C57C4B23ED0168F1B6EA3C9A779406D6B27C960B7196CF016CB25A1F72B91CDB1331
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
pid Process 4868 e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4.exe 4868 e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4868 e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4.exe"C:\Users\Admin\AppData\Local\Temp\e0119502f2b3dab34710dd0d3c713264e09ad2e9e3c9636ab9e17f87004678e4.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4868