Analysis
- user interaction
yes - max time kernel
98s - max time network
98s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
08/08/2026, 12:59
Static task
static1
1 signatures
windows10-2004-x64
2 signatures
900 seconds
windows11-21h2-x64
2 signatures
900 seconds
General
- Target [email protected]
- Size 31KB
- Sample260808-p7317ade95
- SHA256 4663715548c70eec7e9cbf272171493d47a75d2652e38cca870412ea9e749fe9
- MD5 c261c6e3332d0d515c910bbf3b93aab3
- SHA1 ff730b6b2726240df4b2f0db96c424c464c65c17
- SHA512 a93bd7b1d809493917e0999d4030cb53ab7789c65f6b87e1bbac27bd8b3ad2aeb92dec0a69369c04541f5572a78f04d8dfba900624cf5bd82d7558f24d0a8e26
- SSDEEP 768:Tyc7/ovNV004AjWU3GQelVUlidf+prtbjzjy1QVIibtYcFOKc6K:Tyc2z0ajWTQelzdGDbjzKQVIi7OKcl
- TLSH T1EFE21A74D3C31170D28EDE72A6B39BB94B37561B2A5B316E390DA3031EA2184479732F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2044 [email protected]
Processes
-
C:\Users\Admin\AppData\Local\Temp\[email protected]"C:\Users\Admin\AppData\Local\Temp\[email protected]"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2044