Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/07/2026, 23:42
Behavioral task
behavioral1
Sample
loader (4) (1).exe
Resource
win10v2004-20260513-en
32 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader (4) (1).exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
General
- Target loader (4) (1).exe
- Size 45KB
- Sample260702-3py66sds3n
- SHA256 f4ac0dd8936f3481dc8caf47f9363fa4da40f98024a7438f9357ac0dde8537d7
- MD5 8d8ff5953bbf8c2f26208b458b67a2ae
- SHA1 3482e462a3751951aa5a064d7838d61be7720a02
- SHA512 428d6b0490657768229cea15f18548b64b586f1861c88aa60b177ccf3941030cf735fd59df14dc91df3acf73cb8aca2a744168278964d6961d2ff0d69815132b
- SSDEEP 768:1o8S4MqeT1yUCyKSgLgZsrB6NLejb1ynPvVSQUp3I8zw7QP+cs:1omNUW96NL4sn3VSQmI8UkP+cs
- TLSH T165230247212FA90AC5222E3792E514CAD22C23F67BD3A159354650AB1E48FD5BFA2F07
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4068-0-0x00007FF78B4A0000-0x00007FF78B4C4000-memory.dmp upx behavioral2/memory/4068-1-0x00007FF78B4A0000-0x00007FF78B4C4000-memory.dmp upx - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4068 loader (4) (1).exe