eceb4b359d4898022bdf266841b4d6c5eafc63ab56ea680e74f00cac41174b59

Analysis

max time kernel
99s
max time network
142s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30/10/2022, 08:04

Target

eceb4b359d4898022bdf266841b4d6c5eafc63ab56ea680e74f00cac41174b59.exe
Size

670KB
MD5

83dede5f93291555969235c9acade230
SHA1

dfe1447e4a77b1d50901c6dcb6fe5464ba603d05
SHA256

eceb4b359d4898022bdf266841b4d6c5eafc63ab56ea680e74f00cac41174b59
SHA512

a595b6c65415072f2f486cfc96046996b3306d286114ed232d8bcd2ee894a39334aee3294edef8b3b00b7d2647b66a465f174b08dc726fac00a1843da8ee1c83
SSDEEP

12288:8gitGs0IsFqneLlppT09jkArEN249AyE/rbaMct4bO2/mwi:9itV0IsFKeLfpTdFE//Tct4bOsm

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2176	eceb4b359d4898022bdf266841b4d6c5eafc63ab56ea680e74f00cac41174b59.exe

C:\Users\Admin\AppData\Local\Temp\eceb4b359d4898022bdf266841b4d6c5eafc63ab56ea680e74f00cac41174b59.exe
"C:\Users\Admin\AppData\Local\Temp\eceb4b359d4898022bdf266841b4d6c5eafc63ab56ea680e74f00cac41174b59.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2176