Analysis
- max time kernel
150s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
31/07/2026, 04:38
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe
- Size 1.7MB
- Sample260731-e9eq9scg29
- SHA256 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a
- MD5 39b12a2be41b9d5e11bf707d0387f833
- SHA1 2bb04c4449ba678b00be698484abb26557f42901
- SHA512 58bbfd23299fa395c16605e43b131568612a8acf887c55a0d60c11fbf1453746b51dcdfe3f71bbafacd0ad1d5b4bdd4d4953efb566091e06a4a6d6246e118789
- SSDEEP 24576:2h2ydbXkoWS4flK1KG60dtBclzGVwQwWBQfP+ZGYD0uPKHLRa/anEQs:chfWXfc1Q0dtBcBQw0Qk0iUDnRs
- TLSH T12F858D26ABA800BDD1BBD1F88A674503D77278460335AEDF03D096672F277D45A3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4116 bd4ec0b1780ce2620c921c408f15d684bc72c1cdf635fdaaf30efca76964d26a.exe