Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260911-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
02/11/2026, 04:31
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
20aa200e6b7b19046da02b78a3e826fa687d7140971307fa41892af61d8e6fd0.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
20aa200e6b7b19046da02b78a3e826fa687d7140971307fa41892af61d8e6fd0.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
General
- Target 20aa200e6b7b19046da02b78a3e826fa687d7140971307fa41892af61d8e6fd0.exe
- Size 132KB
- Sample261102-e5hx5asw4l
- SHA256 20aa200e6b7b19046da02b78a3e826fa687d7140971307fa41892af61d8e6fd0
- MD5 cd66841b072d3d7968a852f2c6c27132
- SHA1 cf8e84a6b428e9c6c21e7f2694ba36114324694e
- SHA512 10a496cd37c53898ae813ff67e043efe95f78da67d0c98149b9e09c9db620363fef0ae686708a658d07dedc6e5ef33161288bf2ec918def9dd06c90a5427a0d8
- SSDEEP 1536:7zPLRZPA7aiLAIyom2tqBoALpGuqvXBeF:3PLR6+iLAnovXB
- TLSH T109D3925A2B448870E4650EFCA8B62A9706F5BDF31D2DA35B183C72C21FFDBB5540E690
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 5960 20aa200e6b7b19046da02b78a3e826fa687d7140971307fa41892af61d8e6fd0.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5960 20aa200e6b7b19046da02b78a3e826fa687d7140971307fa41892af61d8e6fd0.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\20aa200e6b7b19046da02b78a3e826fa687d7140971307fa41892af61d8e6fd0.exe"C:\Users\Admin\AppData\Local\Temp\20aa200e6b7b19046da02b78a3e826fa687d7140971307fa41892af61d8e6fd0.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5960