52edac97b2e76bedb6f3de963be10cecf97befc36f619283f8ce6cff4569044a

Analysis

max time kernel
145s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
20-10-2022 01:18

Target

52edac97b2e76bedb6f3de963be10cecf97befc36f619283f8ce6cff4569044a.exe
Size

1.3MB
MD5

9fb0eeb7ee2d5987ff48f3050f87ba42
SHA1

73a5a95a7ecece43832bcf1e4a0bd7ba6da3185c
SHA256

52edac97b2e76bedb6f3de963be10cecf97befc36f619283f8ce6cff4569044a
SHA512

6ed2bbc704be61bf3b05173eb8a4f215007b7cc165092eba30ca86b70948c5e36e13e03256885cbbcadb2c36ba357db4eabdcee557f6f2be3d3a4bb7b6ca671f
SSDEEP

12288:P8so0Ldy06+rrb+T2ob+6kb1NqcT6QyAiI:ksosdyF+nqk6y16QyPI

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4752	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4752	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\52edac97b2e76bedb6f3de963be10cecf97befc36f619283f8ce6cff4569044a.exe
"C:\Users\Admin\AppData\Local\Temp\52edac97b2e76bedb6f3de963be10cecf97befc36f619283f8ce6cff4569044a.exe"
1⤵
PID:908

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x320 0x2fc
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4752