Analysis
- max time kernel
148s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
30/10/2026, 12:51
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
limon.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
limon.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target limon.exe
- Size 244KB
- Sample261030-p3sdwsct7v
- SHA256 977409ade006d8dfba2069b3d161d9c1f799f6c81a65760e5d0eead367930036
- MD5 3dea623984ecb92b3982f9b7f2193135
- SHA1 2264be0516bc1a36e6bd21b73bf1ed82a56dbd9a
- SHA512 da65570523ec1c3ece0c794ad668e3b5fd4e47c01fc3c775e72297e71526b54ad13559b480b10f50fd01506c7277216a213941f3da837004392a72a8f11b405d
- SSDEEP 3072:FqeXA/4yIg9vkNPNu6H6xCYOiEUE265VJRWrWejoXXPLu/8TVd0/kbCp8a:FvgvkNFNaxm0E1JRSFMzy8T8/kbC+a
- TLSH T17334F902BA94C069D1668A79AD5289C1FF31BC85CF21E3CB13416B7E1EB67D09D3DB81
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1092 limon.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1092 limon.exe