Analysis
- max time kernel
150s - max time network
149s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 07:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe
- Size 1.7MB
- Sample260804-jt3klsff87
- SHA256 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6
- MD5 0120193907fec4499a606601abd347a4
- SHA1 f4cd3a8516fb29dde937a7899d263cbf630c600d
- SHA512 2fbf41492c086b42fc54962447d6d03d2e8e0188014bc748b6675f9fb785f7bd6ee1b2b9fd1f3aca91a102553eb351191569f5f188c37169e7d396e49e8f1667
- SSDEEP 49152:FS5YDT+tqbbdZfkBTXo3+Hx1Yj6G1rRs:RdmD/x1YmGz
- TLSH T1D285AE16B6A500EDD1A7C1B8CA574507EB73784A0335AFEF07D866661F17AE08E3E720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4152 8cf0f778eb0f8a4b9c5e9b11bc23f196af9f7981d41a37395257f51d2279bdd6.exe