Analysis
- max time kernel
150s - max time network
116s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
24/07/2026, 13:32
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe
- Size 1.6MB
- Sample260724-qs8tkazvcz
- SHA256 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe
- MD5 eca1ac8a12b39659ce3e894ece424e76
- SHA1 078ecdf2c26ef81df2968682851a3f51ff76d869
- SHA512 a0734251fab6c9663ef33a08e64c424b79fac9620da9bdf95984d3d4e77875e43246c5e0bfb1c9f5ecb503c9e071bb6bfadffcbe64ff56ce44f03dd4d7abecd5
- SSDEEP 24576:hARwf227aRq4+n4S7HXST9UC47UiWmyl/J3i/cQkjdw/Ja4WjzPxJcEQse:hARw6Rq7H2UC44lVQWUE4WjrIRse
- TLSH T114758E23A6A401BDD4B7C1F8CA674943E7B2B8460371ABEF03D056662F276D54E3EB11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1344 a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe"C:\Users\Admin\AppData\Local\Temp\a6b2b8fec6260794cc11f76311f9a37eb47c8e7b0545e6fc4dfc78f94b5881fe.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1344