Analysis
- max time kernel
150s - max time network
148s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 19:02
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe
- Size 13KB
- Sample260804-xp9d9acm4x
- SHA256 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed
- MD5 c4fa3dc412064a8d03a0b1d6837732bc
- SHA1 a332a7739f6b371bacd605162554383fe2707cdc
- SHA512 a1109a09c6ee6a2daa6cab073e95186cb7468a101663e1f8145c2de470b1627ea2b154c07a74cf771dc0ddf79f429c03c69ea57e3241b47a9817e95300ecead1
- SSDEEP 192:6/cvmZi2/q7/eQWNAkgDEr4Tervbc3zDcl9+MJb/EE/CJOy99/09CSEwge8:6Zi2c7kggr46ncEj+MJYh1SEwgN
- TLSH T1A2520915F2CCDA17D1FE0AB869E306014770F1272643DF9B1DE9A4BE7F96B4045122AB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4552 51dbba593f521143335f9510bdf4cf3adc55e1ac1e7e35ebfcee6c4e5c34aeed.exe