Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
31/08/2026, 04:45
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
13d5448b63b123ad6f01b845b98504e1e7b0a7e575d5201c468a5590dec9c6b2.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
13d5448b63b123ad6f01b845b98504e1e7b0a7e575d5201c468a5590dec9c6b2.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 13d5448b63b123ad6f01b845b98504e1e7b0a7e575d5201c468a5590dec9c6b2.exe
- Size 5.4MB
- Sample260831-fdt2ravdma
- SHA256 13d5448b63b123ad6f01b845b98504e1e7b0a7e575d5201c468a5590dec9c6b2
- MD5 76dcc058d56620f5435100bcc633cfb1
- SHA1 ad3d348939638fefb27413df16fdf15afae87fba
- SHA512 52211c7bd64fe8d9ddbb676947f705ca7c5cd81998d7e3bd6ccd55ae9126ce09369ad6d06f075d7ffa38e9e879a4e7fb428bd9770cc88a2aaafbeb939d9d3102
- SSDEEP 49152:HpxN/s69kWZxWBE4tdrO4A33TJgLRWo7pZvxrclpBQihl8wiYMPsW+G3rPReDdGs:XWVrPR9p63dqsDdGTulO4H7
- TLSH T1B546AD15A3E500A4E43BDA38CA65C333DA707C925734C64F0A98E6492F73AA19F7F725
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 4692 13d5448b63b123ad6f01b845b98504e1e7b0a7e575d5201c468a5590dec9c6b2.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4692 13d5448b63b123ad6f01b845b98504e1e7b0a7e575d5201c468a5590dec9c6b2.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\13d5448b63b123ad6f01b845b98504e1e7b0a7e575d5201c468a5590dec9c6b2.exe"C:\Users\Admin\AppData\Local\Temp\13d5448b63b123ad6f01b845b98504e1e7b0a7e575d5201c468a5590dec9c6b2.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4692