3dee02960c8e168c7fbe7b1844413d1a6f6d75e2ea7045ec55d529396cbf42e3

Resubmissions

22-09-2022 17:00

20-09-2022 10:36

Target

3dee02960c8e168c7fbe7b1844413d1a6f6d75e2ea7045ec55d529396cbf42e3.exe
Size

37KB
MD5

09ea99786071b7bfd5720a26e479e198
SHA1

27d217be79c8c9b10af665319c9920d1b0227a50
SHA256

3dee02960c8e168c7fbe7b1844413d1a6f6d75e2ea7045ec55d529396cbf42e3
SHA512

2dbb269f47a04262dbda6943cf3a9b2d93620d139b57f0cb60867f27fef9cf5f4c78bdc2b37a807218d136018cf2da20647294307685e9d5a3ecd371cdc7fb9f
SSDEEP

768:Q925ZmU0HaLCMH0UG/mjEOiuXY02jqFN0:Q92nXL3uI1A

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

3dee02960c8e168c7fbe7b1844413d1a6f6d75e2ea7045ec55d529396cbf42e3.exe

description	pid	Process
Token: SeDebugPrivilege	2672	3dee02960c8e168c7fbe7b1844413d1a6f6d75e2ea7045ec55d529396cbf42e3.exe

C:\Users\Admin\AppData\Local\Temp\3dee02960c8e168c7fbe7b1844413d1a6f6d75e2ea7045ec55d529396cbf42e3.exe
"C:\Users\Admin\AppData\Local\Temp\3dee02960c8e168c7fbe7b1844413d1a6f6d75e2ea7045ec55d529396cbf42e3.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2672