cc3567925087862fe31353fef36f7db39be041cdc5828f18cfb694eca6941515

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
22-08-2022 13:48

Target

1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe
Size

352KB
MD5

312096992dabaa78f39001149136f69f
SHA1

f95fccb283b6da9e0dc22f39e9a72b540e1f1445
SHA256

1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c
SHA512

6b531587ff25f8de76d48ee11da348dddb65411d9fd3b2958760202e812e4f9a8eed767cf55284fd50f123985e5d4a86b179258211fe74b02a8b338682185b9c

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe

description pid process

Token: SeDebugPrivilege 4500 1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe

description	pid	process
Token: SeDebugPrivilege	4500	1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe

C:\Users\Admin\AppData\Local\Temp\1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe
"C:\Users\Admin\AppData\Local\Temp\1870b9995da0d798507e5661f6dfc6ce375b97e487a2d4c0b89741a2a986ab2c.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4500

memory/4500-132-0x00000000028C8000-0x00000000028F3000-memory.dmp

Filesize
172KB

Download
memory/4500-133-0x0000000002850000-0x0000000002888000-memory.dmp

Filesize
224KB

Download
memory/4500-134-0x0000000006BF0000-0x0000000007194000-memory.dmp

Filesize
5.6MB

Download
memory/4500-135-0x00000000071A0000-0x00000000077B8000-memory.dmp

Filesize
6.1MB

Download
memory/4500-136-0x0000000006BC0000-0x0000000006BD2000-memory.dmp

Filesize
72KB

Download
memory/4500-138-0x00000000077C0000-0x00000000078CA000-memory.dmp

Filesize
1.0MB

Download
memory/4500-137-0x0000000000400000-0x00000000024DD000-memory.dmp

Filesize
32.9MB

Download
memory/4500-139-0x00000000078F0000-0x000000000792C000-memory.dmp

Filesize
240KB

Download
memory/4500-140-0x00000000028C8000-0x00000000028F3000-memory.dmp

Filesize
172KB

Download