Analysis
- max time kernel
150s - max time network
130s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
20/08/2026, 04:48
Behavioral task
behavioral1
Sample
e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe
- Size 682KB
- Sample260820-fffl5sbd68
- SHA256 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8
- MD5 c134692dd9e800971a5c77a68eeb387e
- SHA1 682c464fbc91606b8264c0157400f0622d6dfbb6
- SHA512 0c339d7f611ca79f774ddfcdcae8680b847e89ef7b554165fde1c09940613d4752a37f659ea4f76de9ac927e72f19ff820a1836f220cc140dfec778ce9da1213
- SSDEEP 12288:HH2GHxHDKaOMAFMvFcKppEveIIhDnHzpBGXAIz0ZDuwlf/2vhKRYKTiVW:HH2GHOMT9cKpSv5eDnTpwXNzQ72vwIW
- TLSH T1BCE433D75A90C271C81D6EB51E61C7B33C103D18FB18AD0B23ACC53765AAD958A7B23E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
-
resource yara_rule behavioral2/memory/4888-0-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-1-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-2-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-3-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-4-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-5-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-6-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-7-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-8-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-9-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-10-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-11-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-12-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-13-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-14-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx behavioral2/memory/4888-15-0x00007FF7EC5F0000-0x00007FF7EC777000-memory.dmp upx - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4888 e8b7f192ce9afee5f43394e19f4f704db33e1fee8ef01bc8aeb765ffa647f1e8.exe