Analysis
- max time kernel
150s - max time network
134s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
25/09/2026, 05:41
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe
- Size 986KB
- Sample260925-gdspcsah74
- SHA256 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26
- MD5 c2ac877ea877d14e5468d6ab7b2acb97
- SHA1 41623dca2939aff2c4344a9dd31f40d4c63b6b25
- SHA512 fcf27c18658446280c119b1eafe68413c75f9815ca2e453d09ac81aab6a1baca662a833f7189e413e8aa0ee3e2fe7cb892101d2dd529935643355b35de798d11
- SSDEEP 24576:pUscLwJ6a2v4aOh+6n3otvDgUWTPxy/T3ePDTB:pvMaUYh+6n3oOUdTiDTB
- TLSH T11325CF51A6A403F9E177D6788A624903F7727C5A43358ECF03A485B61F277E19F3AB20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeDebugPrivilege 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe Token: SeDebugPrivilege 3724 b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe"C:\Users\Admin\AppData\Local\Temp\b22748468a9c9b2fecefb0e847d03c5882d3018384a0a0e0973b90ccb312cb26.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3724