Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
22/07/2026, 01:00
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe
- Size 1.7MB
- Sample260722-bc2yratvb1
- SHA256 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da
- MD5 c764d55792e500abe7783a8a205d7d3d
- SHA1 ccd69ea9bde1730b57ce934a1c91298a575ae453
- SHA512 63d782418bb7ee01e23bcc3cfd6b4c0289fbf7711dc812fb51199513059aa89541f863d1d4d87022c566de1af1798b98e4fb4789f9d772fea2cd04a69c9792b0
- SSDEEP 49152:h52DBS6vRPNIU8J3c57MSTiG3glczsuz9yoo2PU9Rs:YZUgsuz9Xu
- TLSH T1C5859E22A6A801EDD1B7D1F48A268943E773784A0730AFDF03D456662F277D44E7EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3924 99be7d319b32774ba78c7371343033799b14dd3cf8f2bbf55b60b7bb1ef0c6da.exe