Analysis
- max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
20/07/2026, 05:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
todesk.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
todesk.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target todesk.exe
- Size 3KB
- Sample260720-fsaawsft5j
- SHA256 0787987ab5c8b6b3cf87cf2d05a8cb1b209ac367da947a799fc639b35f6fade0
- MD5 5eda10d2f8a124a002b14e036c83fbbe
- SHA1 833c451326855340cd0145449250e87a8385b872
- SHA512 bc7cd21c79eca608168a6facd8d40cca9bf7e7f7944467661efadaed5d768701abb60e409ec582adc2fa4fe164ae3b4e3fd91f243a11f4f987c4d272eda88985
- TLSH T14471B641605456F2E98DE3BF8587B895FD4FB248A2D80B0F4798A81B2F7507BB0DD613
- MD5 SHA1 SHA512 TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1784 todesk.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1784 todesk.exe