73e748ea9f9106fa6d5bf75fceb9d6ac74f3b3b89d3bcef5d6c1eeb4950d85b3

Analysis

max time kernel
41s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
19/09/2022, 12:32

Target

73e748ea9f9106fa6d5bf75fceb9d6ac74f3b3b89d3bcef5d6c1eeb4950d85b3.exe
Size

7KB
MD5

588dcb2cc7c2d454d2d5f9a448d7992d
SHA1

6c59338f1a84cd3579dfefddf1f056ebe60ffa8e
SHA256

73e748ea9f9106fa6d5bf75fceb9d6ac74f3b3b89d3bcef5d6c1eeb4950d85b3
SHA512

cabbec5e7af9c1c0a80fc5039e455590cfd870a89a1c1bb415f719c1433046f2cae760c60fe4790c7bf630075d3e2c425d08f6de15fdb103972fa39336429a24
SSDEEP

192:UaWqbvL41LRcvAx5VQd2g2rdFIQdpk1bPfJ:rWqzc1LRca5NKQo1b5

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	1184	73e748ea9f9106fa6d5bf75fceb9d6ac74f3b3b89d3bcef5d6c1eeb4950d85b3.exe

C:\Users\Admin\AppData\Local\Temp\73e748ea9f9106fa6d5bf75fceb9d6ac74f3b3b89d3bcef5d6c1eeb4950d85b3.exe
"C:\Users\Admin\AppData\Local\Temp\73e748ea9f9106fa6d5bf75fceb9d6ac74f3b3b89d3bcef5d6c1eeb4950d85b3.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1184