eec3604acc91abae3343db62517ef3a8e9a222b6ef86660ba7b20173dc91ba4d

Analysis

max time kernel
8s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
24-10-2022 05:15

Target

eec3604acc91abae3343db62517ef3a8e9a222b6ef86660ba7b20173dc91ba4d.exe
Size

352KB
MD5

7426abca716ab576b667c130dc31c470
SHA1

1e375576e068393dd947462dc16b9b8f685a346a
SHA256

eec3604acc91abae3343db62517ef3a8e9a222b6ef86660ba7b20173dc91ba4d
SHA512

672f01eb4e71ff9442c4e8d9a1b2ee1459d6ffb41551df6c6a32ee91510e1f9e524e82ddabdb8620efb7f29cedca9a3abd2b071f4eb0a195a7140749923d3543
SSDEEP

6144:mS48iSC8d+s1ScRmCHY++2RaKcUu4lzyWHBzRrvF:BHC4xkB2ROOBVrv

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

eec3604acc91abae3343db62517ef3a8e9a222b6ef86660ba7b20173dc91ba4d.exe

description pid process

Token: SeDebugPrivilege 1660 eec3604acc91abae3343db62517ef3a8e9a222b6ef86660ba7b20173dc91ba4d.exe

description	pid	process
Token: SeDebugPrivilege	1660	eec3604acc91abae3343db62517ef3a8e9a222b6ef86660ba7b20173dc91ba4d.exe

C:\Users\Admin\AppData\Local\Temp\eec3604acc91abae3343db62517ef3a8e9a222b6ef86660ba7b20173dc91ba4d.exe
"C:\Users\Admin\AppData\Local\Temp\eec3604acc91abae3343db62517ef3a8e9a222b6ef86660ba7b20173dc91ba4d.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1660

memory/1660-54-0x0000000075FB1000-0x0000000075FB3000-memory.dmp

Filesize
8KB

Download
memory/1660-55-0x0000000000400000-0x000000000049C000-memory.dmp

Filesize
624KB

Download
memory/1660-59-0x0000000000350000-0x00000000003D6000-memory.dmp

Filesize
536KB

Download