69b3e025656e75075fb1f8c62002ef06324f105d71d8f622c746d9b99e1e3636

Analysis

max time kernel
83s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
31/10/2022, 21:50

Target
69b3e025656e75075fb1f8c62002ef06324f105d71d8f622c746d9b99e1e3636.exe
Size 2.9MB
Sample221031-1qbfdsecfm
SHA256 69b3e025656e75075fb1f8c62002ef06324f105d71d8f622c746d9b99e1e3636
MD5 8bef42e4a1c2472d6e165a278ddec8eb
SHA1 3e8a3b27bed747b2bb2264d59fde0d939406c2e5
SHA512 f67808afe8ee8641ad8b483eb7fa8b68a992c00778477aead77f4ce518561655b7284931c2e292f66167b3b325cb6d27d4c7836852f9ae87fbb342fc22b0f6fa
SSDEEP 49152:xPV3ssybZJsggkKLkzjXhqK7M222S3f6G2MhNXFTVF2hcJTz77e0:ncsydKSRLhqK7+Pj2S/F2qJTzne0
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
1728	69b3e025656e75075fb1f8c62002ef06324f105d71d8f622c746d9b99e1e3636.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2372	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2372	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\69b3e025656e75075fb1f8c62002ef06324f105d71d8f622c746d9b99e1e3636.exe
"C:\Users\Admin\AppData\Local\Temp\69b3e025656e75075fb1f8c62002ef06324f105d71d8f622c746d9b99e1e3636.exe"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
PID:1728

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x308 0x2f4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2372