Analysis
-
max time kernel
27s -
max time network
61s -
platform
windows10-2004_x64 -
resource
win10v2004-20220812-en -
resource tags
-
submitted
28-09-2022 14:00
General
-
Target
IDA Pro 7.6/dbgsrv/win64_remote64.exe
-
Size
866KB
-
MD5
fd0005027332a0e38d5f345c5fc29364
-
SHA1
5b71771276fd9c6d1d2c62c967aec829263ece66
-
SHA256
6a46b41076bc9ef0dda114d3c7b9fb5d8253ed89e39558868d972508b6f6bb10
-
SHA512
84f0fd9192a35e1da051fd2924590133becc98ddc96d103cdd8df762efcb552aa5060c6de8e887c2a025ab4010686a39b023183f26567d6beb39b61938be5614
-
SSDEEP
12288:yZ1yd68e1wwJcFk+bR2fElMsIWQBBzDdmj8My39r5TKJXt:y/y4dWwJyTYfEKs5ANmjG39r5TKl
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.6\dbgsrv\win64_remote64.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 7.6\dbgsrv\win64_remote64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken