b9eb97a5801a2b4fec2e0350d0f0a9195c8837a171622db9f95c6b98c138ab59

Analysis

max time kernel
147s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
11-10-2022 21:07

Target

b9eb97a5801a2b4fec2e0350d0f0a9195c8837a171622db9f95c6b98c138ab59.exe
Size

734KB
MD5

7aa7ec3df1b99331462b1915ba6a83a5
SHA1

5d9b11d06bf3c1cb1a8acf51bae7ecaf52172e76
SHA256

b9eb97a5801a2b4fec2e0350d0f0a9195c8837a171622db9f95c6b98c138ab59
SHA512

165b1e9b2f786a2f0d467c4d7a23667c634f1402de830a03142b07e5a962186c82307af9f2205e371b228d8dc159458aea519612c64c8a70f55bb033feb63905
SSDEEP

12288:pRObekMtkfohrPUs37uzHnA6zgpKq35eERXprNrHIR3+j1vGgZpDExycFm:zObekYkfohrP337uzHnA6cgqpeEFHR9

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	704	b9eb97a5801a2b4fec2e0350d0f0a9195c8837a171622db9f95c6b98c138ab59.exe

C:\Users\Admin\AppData\Local\Temp\b9eb97a5801a2b4fec2e0350d0f0a9195c8837a171622db9f95c6b98c138ab59.exe
"C:\Users\Admin\AppData\Local\Temp\b9eb97a5801a2b4fec2e0350d0f0a9195c8837a171622db9f95c6b98c138ab59.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:704