Analysis
- max time kernel
150s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/10/2026, 19:58
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
main.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
main.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
2 signatures
150 seconds
General
- Target main.exe
- Size 875KB
- Sample261009-yps8pseb55
- SHA256 6902298ae646236f21ac1e51e8c8d9babd885d8c2f93ba830d179563b752b7f4
- MD5 725ca02852f6b11841e0433dcf5ae800
- SHA1 6d2496ffc0373469c845130cf66bab4f29b490ca
- SHA512 57e9c943c063f1013f3551297b683eb8460d5c0dca69f446e151241c0c16e9548ff4c4e6fc6a634ce21b1294700f1c5843fc8a32a060ef23fce9230a14a22804
- SSDEEP 12288:fND2FlWnvdqTsXhHizstMXXB0vM5uT1zK34zX8ZvPIMnFnPoQLJ:1DHnlqwIw4R000KIzX8/nFnPNL
- TLSH T13C15AE44B2A441FCE173E5B9C9A7A61BE772380603109EEF53D086661F737E05A7BB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe 560 main.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 560 main.exe