Analysis
- max time kernel
150s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
30/07/2026, 02:23
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe
- Size 1.6MB
- Sample260730-cve3daxeld
- SHA256 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e
- MD5 f9b94370505e7c70ee0c35bee267f621
- SHA1 833dd0ac20dc08c77773144af7c29c80155f04cd
- SHA512 94158632508046cc061de37fbb5fa7d2cf551f3645cafdba449e2fb70343ec2c0691ef5e1333f085017576796749120e04e559effdabbd24af25820e20167674
- SSDEEP 24576:IirJrNhEwXVyggyaFM4CoBwcu/WGUGykXPbbcrYGtPEQs:IiFrNtX8y/4NBL9GVykfXcrYGtPRs
- TLSH T18385AE27A79501BDD0BBC1B9CE568942E772780A07719BDF17D096622F277E00E3E722
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4800 0d4869beb7305a36c5531afce87710b64f5d973e6fe6883e14c4d027d446259e.exe