1d2bd1d8a6cd05e564ff57f0888fe184bf10d1fcd55da465855d13786f2bd061

Analysis

max time kernel
161s
max time network
182s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 13:34

Target

1d2bd1d8a6cd05e564ff57f0888fe184bf10d1fcd55da465855d13786f2bd061.exe
Size

197KB
MD5

ad961094872e7c34cac33d0a63f8a4db
SHA1

382c775d6bb02f6a27d668b87238531e456abe12
SHA256

1d2bd1d8a6cd05e564ff57f0888fe184bf10d1fcd55da465855d13786f2bd061
SHA512

2ed6266f190e022c56283ce069ab34b5d2d7821e61b047903632b668a8e85067898a45f2415caa2fe960c8c87f443577ee6eed9cd7dac8a273b2494337b15ab7
SSDEEP

3072:9IV58I0oMtw6z9nQAUPJ9Lx7X2AmdrJog7yWz9SjS5o:9IZt36zpUh9LZXQ5BG

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3112	1d2bd1d8a6cd05e564ff57f0888fe184bf10d1fcd55da465855d13786f2bd061.exe

C:\Users\Admin\AppData\Local\Temp\1d2bd1d8a6cd05e564ff57f0888fe184bf10d1fcd55da465855d13786f2bd061.exe
"C:\Users\Admin\AppData\Local\Temp\1d2bd1d8a6cd05e564ff57f0888fe184bf10d1fcd55da465855d13786f2bd061.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3112