bc411cd472d250a249ab09422632950b8f69efdff9cc316cd223a7e41df5cb35

Analysis

max time kernel
9s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
23-10-2022 21:06

Target

bc411cd472d250a249ab09422632950b8f69efdff9cc316cd223a7e41df5cb35.exe
Size

424KB
MD5

5bf4fb0a44f3a28b8075d38d0a5434ea
SHA1

32b731cf212bc10d5b92d4ecf8729b0f14d40d30
SHA256

bc411cd472d250a249ab09422632950b8f69efdff9cc316cd223a7e41df5cb35
SHA512

ca1afc74968099d291db42dc18dc433204f4808cdfba66de8f5e838c547e12bd196047e8eee364772cdfeeb769525a30cb7e68f95fb4e9664b105aa54a45b167
SSDEEP

6144:WlgxzBDqFbm4BwEaOufP6WJbWruNHTIwoMjJUZs6Cxa+OkkhdAq99oXbftChXW3d:GAVUnICWJK6lTwhsRoMq9MblCJxfS6

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

bc411cd472d250a249ab09422632950b8f69efdff9cc316cd223a7e41df5cb35.exe

description	pid	Process
Token: SeDebugPrivilege	1608	bc411cd472d250a249ab09422632950b8f69efdff9cc316cd223a7e41df5cb35.exe

C:\Users\Admin\AppData\Local\Temp\bc411cd472d250a249ab09422632950b8f69efdff9cc316cd223a7e41df5cb35.exe
"C:\Users\Admin\AppData\Local\Temp\bc411cd472d250a249ab09422632950b8f69efdff9cc316cd223a7e41df5cb35.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1608

memory/1608-54-0x0000000075A91000-0x0000000075A93000-memory.dmp

Filesize
8KB

Download
memory/1608-55-0x0000000000340000-0x00000000003C5000-memory.dmp

Filesize
532KB

Download
memory/1608-56-0x0000000000400000-0x00000000004AD000-memory.dmp

Filesize
692KB

Download