ee075a99ea871fad2d69bda61109db455a4f6c996a79cf7c50d94234e639040d

Analysis

max time kernel
39s
max time network
47s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
11-10-2022 21:06

Target

ee075a99ea871fad2d69bda61109db455a4f6c996a79cf7c50d94234e639040d.exe
Size

371KB
MD5

68c97cda813ad09d61d5ff0c398b2a55
SHA1

2358305c8968f0cdd975abab8651d124c784e3b0
SHA256

ee075a99ea871fad2d69bda61109db455a4f6c996a79cf7c50d94234e639040d
SHA512

b1d1009c966c964a0af249ebc2a2d31a99ffb19856035dbd365d191bb20d620e4ede1325746307d1bbc792da0cb67e983173e283e7c4d0e1f889f97caf8c7615
SSDEEP

6144:1rAZQIyhUblMIrCidfLALKPLF74wnHpqrMmPUlKHEksYRMyf:zjQrCiZLAGPLF742/wUMHVyyf

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	968	ee075a99ea871fad2d69bda61109db455a4f6c996a79cf7c50d94234e639040d.exe

C:\Users\Admin\AppData\Local\Temp\ee075a99ea871fad2d69bda61109db455a4f6c996a79cf7c50d94234e639040d.exe
"C:\Users\Admin\AppData\Local\Temp\ee075a99ea871fad2d69bda61109db455a4f6c996a79cf7c50d94234e639040d.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:968

memory/968-54-0x0000000075501000-0x0000000075503000-memory.dmp

Filesize
8KB

Download
memory/968-55-0x0000000000EB0000-0x0000000000F13000-memory.dmp

Filesize
396KB

Download