Analysis
- max time kernel
150s - max time network
151s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/07/2026, 01:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe
- Size 1.7MB
- Sample260729-b875msde44
- SHA256 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9
- MD5 a49da985ed84c3ea5be994197bdebd01
- SHA1 debe148687a0714f284c9993928449af217c2d95
- SHA512 0b65fcd4b574cff6003f455b212a107664c80a5a4338021606c36d4187fa0bdb07f630eee3171c6281e7c82d9f1d4fc2f85212b48134660bf03e6d297a27a649
- SSDEEP 49152:n89aq41nnc3ZB3Ivx1UNmUhmUqrUzz7Ql8Rs:8LUA3q2Z
- TLSH T1D285AD26ABD401FDE0BBC1B9C9568842E772780A07709BDF17D456722F676E44E3E322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4996 a0ca71914d3da410396c46d8a23e34ddd4dbcfb3c29f2a6a6f5807d933c0a2b9.exe