073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef

Analysis

max time kernel
75s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
28/10/2022, 18:08

Target

073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef.exe
Size

170KB
MD5

0b25185fbe39bbbd8aab2daaa0de0924
SHA1

e0fea4569f3b5b924293fdb0c8c3313c222280ca
SHA256

073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef
SHA512

3a2b86afb2107c8e536bfea1825808a1d8be0370a5105df9163585f28d7835ea31673397e5163d20c9e259cec66b38a081525c1436707baa9a7dd6d099acbe06
SSDEEP

3072:DOp8KRaug8q9/ZXoOIeBBMLE0Y11rP3jfkvpoGoFjT7rEzmZ/B9Ww2CUQGO/bF0P:iCKRaczLE0ofkvpoGoqzY3zF0rth

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSecurityPrivilege	804	073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef.exe

C:\Users\Admin\AppData\Local\Temp\073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef.exe
"C:\Users\Admin\AppData\Local\Temp\073a2f9c152b933ac174c5c67a5f74f6083818ba0bd36573d3e79dd2970da7ef.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:804