Analysis
- user interaction
yes - max time kernel
50s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
17/08/2026, 16:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WaterDumper.exe
Resource
win11-20260513-en
windows11-21h2-x64
2 signatures
150 seconds
General
- Target WaterDumper.exe
- Size 23KB
- Sample260817-vb2fdavzcy
- SHA256 0c0cb45310d08feeb37e2e9bab8eb1a51f1e24f7a49ae0153c3c3dfc110ce700
- MD5 e20e70b3020d16b287680cac0d758743
- SHA1 8035a2619aa4bd3d22977ae12976b7a5cc27458a
- SHA512 40845ffb42d91a8bf1810fc531a84b806de91330d4ef161681eb28524641b6ea02b2c298b8ee287fc66e3c663be58317821f87756326cd420a48bea23bf9f080
- SSDEEP 384:mKGxJdbVwUU6DxwxkDA+Sb5Rvgp3418lx1FHHlAsNCdosi8fH:mtdaeJSDIpw87flAsNbsT/
- TLSH T1A1B294243AFE5019F3B7AFB51FF0B59E9A6EF6632A16A05D1051034F4B22A00CD52B79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 52 IoCs
pid Process 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe 2008 WaterDumper.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2008 WaterDumper.exe