Analysis
- max time kernel
150s - max time network
127s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/07/2026, 02:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe
- Size 1.6MB
- Sample260731-dbd7eascqh
- SHA256 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22
- MD5 12c7485d67071719297bc0d3dca516d3
- SHA1 3572268e74c748c6780d5ba73e21d9851f1cdde3
- SHA512 fca87dd4d831ce5013430c560d14174356ee0deb3327ac70528aac349acce0094ae78a19d92a62cd5443e305d750d9e02aed50ff1dd46d6e84eadd065f7a8723
- SSDEEP 24576:ryeLdAOKNEqhNp0liw/i82mhZPfWrU/GbtW5BBkpKeeoKHauPEiWsMFEQs:JAlNt8v/i82mHvBBleeXEiWsARs
- TLSH T10C75AF16AAA401EDD1B7C1F8CA574543E772784A0735AFEB03D0A6662F17AE04F3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3460 42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe"C:\Users\Admin\AppData\Local\Temp\42acd53c62a2fa95017c8b390db4c6d3f29a7769db062f0ed94f49ec925fda22.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3460