916e85edf07486c49d077c3dcb9e3539cddbc1f4c28d1e827ea569950ab16835

Analysis

max time kernel
146s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
10-10-2022 19:08

Target

916e85edf07486c49d077c3dcb9e3539cddbc1f4c28d1e827ea569950ab16835.exe
Size

886KB
MD5

58c868e1d04d186b2370a8d15ec8c003
SHA1

fd696e709cedd98681e39ac076120e8da91b74db
SHA256

916e85edf07486c49d077c3dcb9e3539cddbc1f4c28d1e827ea569950ab16835
SHA512

3763d3b29922a829786c84cfcb01f5d5676a30d3d9bafd11b6075915536418712eb51e374f5084bc0a64ea41e6c8a7ab2b68f712cdb28dbd3f4f5830f84e3344
SSDEEP

24576:elqUjzT2YjAUlEjwSgDZ7QQDCK98JYjNz7M:8Waxl4gDZf2K98KNfM

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1780	916e85edf07486c49d077c3dcb9e3539cddbc1f4c28d1e827ea569950ab16835.exe

C:\Users\Admin\AppData\Local\Temp\916e85edf07486c49d077c3dcb9e3539cddbc1f4c28d1e827ea569950ab16835.exe
"C:\Users\Admin\AppData\Local\Temp\916e85edf07486c49d077c3dcb9e3539cddbc1f4c28d1e827ea569950ab16835.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1780