Analysis
- user interaction
yes - max time kernel
34s - max time network
23s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
26/09/2026, 23:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ScarletSkipsMod_[unknowncheats.me]_.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
ScarletSkipsMod_[unknowncheats.me]_.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target ScarletSkipsMod_[unknowncheats.me]_.exe
- Size 368KB
- Sample260926-3wc8aathkb
- SHA256 615126e82629b6cf6cf398c5edf8a0c063d4a57b65d3d24731cb441e728e4b25
- MD5 2248b0bc44106a6d69ef28e9c71bf9f7
- SHA1 7736511f861342b8a132ab773f4cac00dcbac002
- SHA512 cf243f9fc63491fe5fd3f4cccd07f893837e876911a6becc77008cee061ba6d6d028ae13a46b2539ad47c805729121861de50b5f61a551b5efe67027b5bb1d12
- SSDEEP 6144:oLaPEiAvZEbXAKC/Zl8yoNMeRh/k3VeIdZ:QdREbXArl8tn/k308
- TLSH T1E5847D15B3A500FAE5778578C9530A06FB7278150770AADF07904BB69F2B7D0AE3EB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe 6112 ScarletSkipsMod_[unknowncheats.me]_.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 6112 ScarletSkipsMod_[unknowncheats.me]_.exe