Analysis
- max time kernel
150s - max time network
141s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
29/07/2026, 01:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe
- Size 2.0MB
- Sample260729-cc71fasbrc
- SHA256 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61
- MD5 3c83550c6ba7f5b424df327b620a166d
- SHA1 c389b1acb2ea8fabb6dc5516877b425f19e17166
- SHA512 f784bc32f40e7fcd6774172d88d83fcdd142fd580ca07f24c53e1888562d8d9ee77da3702b7a824ab2d07b562065c054b9be6ff9fca4a4ba4c25cd893dbd4724
- SSDEEP 49152:WL8/4/qjS/DNAPZ4TUTuFkOjjRs4YsbaV:NlIvUTuFzN/Ysbk
- TLSH T13CA5AE26A7A801FDD1B3D1B8CA578906E7B278460730AFDF07D056662F277D44A3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4836 5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe"C:\Users\Admin\AppData\Local\Temp\5101d5de5bb94599a2a346a318fa9822a6bbf1a401185ce63abc773b4169be61.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4836