a60acd4644e36867f7929eabf1b9a903712da9c8cccae7c9611928d4a66b00ee

Analysis

max time kernel
81s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 06:35

Target

a60acd4644e36867f7929eabf1b9a903712da9c8cccae7c9611928d4a66b00ee.exe
Size

102KB
MD5

a438625916329e89374fbc27238f2c31
SHA1

0bf0bac145563e6b83fd2255ae206b0a21e568bf
SHA256

a60acd4644e36867f7929eabf1b9a903712da9c8cccae7c9611928d4a66b00ee
SHA512

081ed9d39064e52080b9ea6338453e95ab8974f9248f20dc7dd7d52957bba2c28c593e7edb1d621dbecf42a98610ad8d871d510e71ba2db017351fc42a185656
SSDEEP

1536:UdJ4pmKOTKuD5svMCVtbDOYcooFL050uUEoRLraGk+Q/TusmCfHB8eb:UdmpmJTfDunpcpFL1uUNATBmCfHB1b

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	1716	a60acd4644e36867f7929eabf1b9a903712da9c8cccae7c9611928d4a66b00ee.exe
Token: SeIncBasePriorityPrivilege	1716	a60acd4644e36867f7929eabf1b9a903712da9c8cccae7c9611928d4a66b00ee.exe
Token: 33	2236	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2236	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\a60acd4644e36867f7929eabf1b9a903712da9c8cccae7c9611928d4a66b00ee.exe
"C:\Users\Admin\AppData\Local\Temp\a60acd4644e36867f7929eabf1b9a903712da9c8cccae7c9611928d4a66b00ee.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1716

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x308 0x2f4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2236

memory/1716-132-0x0000000000400000-0x000000000044F000-memory.dmp

Filesize
316KB

Download
memory/1716-133-0x0000000000400000-0x000000000044F000-memory.dmp

Filesize
316KB

Download
memory/1716-135-0x0000000000400000-0x000000000044F000-memory.dmp

Filesize
316KB

Download