da0daab369787062da50a9e75009f359c2873826b21b9c75581d75b2d7a488d1

Analysis

max time kernel
193s
max time network
222s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
30-10-2022 14:39

Target

da0daab369787062da50a9e75009f359c2873826b21b9c75581d75b2d7a488d1.exe
Size

1.2MB
MD5

a2c93814a8b0c387eeb8cd4fefdb1693
SHA1

5ad3c633c76f08e36215760146d17633a58d4907
SHA256

da0daab369787062da50a9e75009f359c2873826b21b9c75581d75b2d7a488d1
SHA512

644b1595922ec62006fad3596d244b32cf2d6e484b7cc8a47bd178798918ebc197693ebd77febe8098a339b5056ca03b3d0525564a38d8099247e326b8038368
SSDEEP

24576:eStU4gf2EW5A2DJrMkFLv3Ik6vhh7Ea1Ol+EuTG600HG4lc:eh43DpMZJhP2m700m4l

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4424	da0daab369787062da50a9e75009f359c2873826b21b9c75581d75b2d7a488d1.exe

C:\Users\Admin\AppData\Local\Temp\da0daab369787062da50a9e75009f359c2873826b21b9c75581d75b2d7a488d1.exe
"C:\Users\Admin\AppData\Local\Temp\da0daab369787062da50a9e75009f359c2873826b21b9c75581d75b2d7a488d1.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4424