Analysis
- max time kernel
150s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
11/07/2026, 06:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
_8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
_8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe
- Size 640KB
- Sample260711-hllfpadt9j
- SHA256 8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198
- MD5 5081657547532969afad7a03891b43f7
- SHA1 2aa33f9d04274c941ec0a668819a2f3960c691d1
- SHA512 66d44c75fe03e44cd09a2ed8e397960e586ab990636509efbcd302d573b025c1861d12869cde01b623954547dba6e5f57091933f8f333d378c805edc40e87b14
- SSDEEP 12288:M9J85LGE/c8SttVJDj8iCug9aCenPcN3CNIb88WsNMP5F1k:M9gSE/c8SttHf8iC7hWPW3CNIb88WsN8
- TLSH T166D4194177409B51D55A317AD3D618340BF1B9E74B32C20AEF8A3FA97D72363AC1B60A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeSecurityPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe Token: SeBackupPrivilege 1856 _8ebc8fc6ce56d5684a1f15bc23439a183e5955ab82971c5c7a7b0b8832d78198.exe