Analysis
- max time kernel
150s - max time network
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/07/2026, 09:22
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe
- Size 4.3MB
- Sample260720-lcbfxafw7v
- SHA256 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee
- MD5 0ee6feb2339974ae21291c0c483c6517
- SHA1 2e621ffd51398bacf055077fc266c805d51f4f68
- SHA512 323a63e648a4db3625854dd3284a9877cec9efe84a9c5d0b08cf1e0994e817d8dbca985fee764a9ee5c1f4cbf52b51819748bd7c15bcc9903d95b868da349213
- SSDEEP 98304:MYPbkOkQ6+XPPmJEPPPt111v2q/6TGLG7R+X:RjkOkQ6+fOJEPPPt111vd/uGT
- TLSH T1A9267B4BAEF30C9DC43E7078CD577A16E672BC0C567056475AB8F6E0AE732601A1AE13
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 3548 c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe"C:\Users\Admin\AppData\Local\Temp\c7064f1e9b360dc6640bcb9c36e6f49b53f822f16bf18f3e1168b21bfbe104ee.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
PID:3548