4e4d83c184289bbf1425c2d093debd3b7a9e42f01eba5e375d74b4846baeef50

Analysis

max time kernel
145s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
20/10/2022, 09:51

Target

4e4d83c184289bbf1425c2d093debd3b7a9e42f01eba5e375d74b4846baeef50.exe
Size

763KB
MD5

80852c816b245baac1d9784ec70cb062
SHA1

9ee9f8360e9f774edb3bd1ceb16026692018bec8
SHA256

4e4d83c184289bbf1425c2d093debd3b7a9e42f01eba5e375d74b4846baeef50
SHA512

74ef2148e97d0f6757b51de3f9a1bb00dcb6d2df9f3f4d5affb1fc7ffbfd97cd3cf172c064bf8e4b657578985f4bf7f85114b5d8479fa80d5062f0aad368b070
SSDEEP

12288:C6lg9NZK9jbrW5AwGwHDx1fKIWnxvVtO2tjvP5cU7MoShS/JX1xqL:d+969/rW5AjixF+xvjO2tRWiDq

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2268	4e4d83c184289bbf1425c2d093debd3b7a9e42f01eba5e375d74b4846baeef50.exe

C:\Users\Admin\AppData\Local\Temp\4e4d83c184289bbf1425c2d093debd3b7a9e42f01eba5e375d74b4846baeef50.exe
"C:\Users\Admin\AppData\Local\Temp\4e4d83c184289bbf1425c2d093debd3b7a9e42f01eba5e375d74b4846baeef50.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2268