Analysis
- user interaction
yes - max time kernel
28s - max time network
29s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
10/09/2026, 15:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
DwmLutGUI.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
General
- Target DwmLutGUI.exe
- Size 41KB
- Sample260910-telnnasbla
- SHA256 5bd14307f344f802ba2a43f18b118cd15fd2056c2e01dfeaa7b16afbe637e280
- MD5 3b4757e1a391ad8afe84a433ea044335
- SHA1 1d04873b685e26377ed7be16f1dea43f149dd07e
- SHA512 a4f95040ebb2839b6f87dacd687e22110e6f02c5a7032f4d9645c20b4bfe58cd8fb39eec9e1c59f4cb7fb6e6a23aa89e06d16713fa5fed337f0b192353574a3a
- SSDEEP 768:Xu3QbzTyrqZmr3dYzBA9dMFciV5yQIXXFABQJVDDDDDRVDDDDDsetYcFwVc6K:XaQXurqZmr3dEKjit5yQIXVABQ0iwVcl
- TLSH T1B9132A4167A8C213CEAE4339987582449772AADEBB21DBE93E8C605D6F3334153136F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 3 IoCs
pid Process 4072 DwmLutGUI.exe 4072 DwmLutGUI.exe 4072 DwmLutGUI.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 4072 DwmLutGUI.exe Token: SeDebugPrivilege 4072 DwmLutGUI.exe