Analysis
- max time kernel
150s - max time network
147s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
29/07/2026, 01:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe
- Size 1.6MB
- Sample260729-ca3b6ssbmd
- SHA256 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2
- MD5 30ccf78270be8b7832f7ef700f0c67f5
- SHA1 4e6849179a77c7c64bde2278e548dce4539fc737
- SHA512 a0d8475f949b182b897546a7a5790b9cb7e0eb33a7307832999b09fd5a1a87805c6a3854686a21ac633e15bf3cf4450a82887c6a51afd8e3f3dac41cf024a601
- SSDEEP 49152:Gt/KkoxwpgTNDYB8cfBODQmsohiJJK9mIKgMtRs7:Vk2wQDYa2msohiJw6X+
- TLSH T1A085AE17AB9501FDE0B7C1B9CE468802E772780A07719BDF57D096A22F676E04E3E712
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4692 2d3cb938c05dec299ea80b332c7637bd2d08fc1e873273401a87336a506de5e2.exe