Analysis
- max time kernel
124s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
15/07/2026, 01:05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CLIT.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
CLIT.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target CLIT.exe
- Size 185KB
- Sample260715-bfn63agy9p
- SHA256 7418eb95041a411344845ed24e7c3091643f83f6b8cb084862011945b7fb83a7
- MD5 0f260387e522f394283ee8ea3e6b56b8
- SHA1 b11227fbba370c2734807755c3ea38405da86771
- SHA512 2dbdb17eab80d1a62f4976bfb52a8b053dc79f7848303f3697a30ec12b3db5be5f2f84459a1e07bb7d0de46200cd3c8ab02ad0de2a68209c38097f37a5d2ae01
- SSDEEP 3072:lWQyTTtuHhPU0+4qWN3kOHwGSeahtXs3xHbPA/6ugvIv0Iuqsu1MNL7xRoLl6/ZO:lHyluHhPU0+4qWNUOHwGSeahtXshs/ka
- TLSH T149144B307DCE606AC49351FFA98657A0323BE0A48B056DB725DE83CD11D9889E777B23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5900 CLIT.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\flux_debug.log
- Size 4KB
- SHA256 18bb1288ff0b5982671da9418e0774f092c2e97085d90fd481b9a13e5506e463
- MD5 22df1ac857717280804454622af9ddde
- SHA1 4fe8a2a9073f0634587b2d95172350b02b4fddf0
- SHA512 43abde9b34067df132403b2b767cd2d1679407855de6c7180e58dfe121dc01dc57d644128b5c05d94fce8994e5ad429659f5fd96609f1e135feae7b45882f5a4
- SSDEEP 96:qx4x7xy5x2x6xvxxxOxAx5xwxAxGxbxKxhbxTxJxJxHxzxmxS:qx4x7x6x2x6xvxxxOxAx5xwxAxGxbxKH
- TLSH T1D7A1AC3022008558AB5312A9195B98B4F5B5861647911452936E8A3CE83AFEDF3FFFCB
- MD5 SHA1 SHA512 SSDEEP TLSH