Analysis
-
max time kernel
24s -
max time network
89s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28-09-2022 14:00
General
-
Target
IDA Pro 7.6/dbgsrv/win32_remote.exe
-
Size
709KB
-
MD5
b0a18e882b7d0ec72f12314488887ff5
-
SHA1
37bd1f64af561e00c38a858b7d0a0ae3d5b041ec
-
SHA256
13cac0f96fd43233747a594b536c8e50b6c0e87281f045a714005c4bf47e2166
-
SHA512
322edfe99119c0107610d27eafe4e30581a4b65f84b8b7f7cec2df084f4f23f4d5fb9a96c53c09bcf88bb1d724bb2007060bf7b11517cf1dacb970ab71e3b5c3
-
SSDEEP
12288:n02WNMu6V+Epzs0kJmULIOiRDBrpNDnIa9T5elekPOOJRI1+Gs3+bQYFzLiTgoCa:nvz1jnIgTKe4JRos3uFzLiToTTa
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.6\dbgsrv\win32_remote.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.6\dbgsrv\win32_remote.exe"1⤵
- Suspicious use of AdjustPrivilegeToken