e2ba3fa911ce4c806e8e25b37d1a9522baf1655e66cab2e0d4fabaf31cc2437f

Analysis

max time kernel
108s
max time network
118s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
28-10-2022 17:51

Target

e2ba3fa911ce4c806e8e25b37d1a9522baf1655e66cab2e0d4fabaf31cc2437f.exe
Size

41KB
MD5

0b2b908be38a9ca8fd8102e352b7f288
SHA1

867984900377f31b3ce3722bb03433b1ce13206f
SHA256

e2ba3fa911ce4c806e8e25b37d1a9522baf1655e66cab2e0d4fabaf31cc2437f
SHA512

417f3a28cedcda995c956b2c944c4ab0ff90df43b9f726a607e1729e07d66c965fbbc9196c176d3016e5a3020904138e71a1129b875aa33654fcb97990a5a663
SSDEEP

768:d9sYd6+D+OSs5R55hwc+6dlRB0RaEXj/3udBnrvO6fVYlkcM:dv6B0Pv6aC/3YyEy

Score

1^/10

Suspicious behavior: LoadsDriver 1 IoCs

pid	Process
648	Process not Found

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeLoadDriverPrivilege	1332	e2ba3fa911ce4c806e8e25b37d1a9522baf1655e66cab2e0d4fabaf31cc2437f.exe

C:\Users\Admin\AppData\Local\Temp\e2ba3fa911ce4c806e8e25b37d1a9522baf1655e66cab2e0d4fabaf31cc2437f.exe
"C:\Users\Admin\AppData\Local\Temp\e2ba3fa911ce4c806e8e25b37d1a9522baf1655e66cab2e0d4fabaf31cc2437f.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1332