307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59

Analysis

max time kernel
139s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04-11-2022 18:21

Target

307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59.exe
Size

62KB
MD5

80a1192d85ad7e8d5c0d4dbf1b117228
SHA1

cdeb0088733c24dd4841d9468d5af1484a3dc780
SHA256

307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59
SHA512

c9f090c1d34add8f164b91084c085eb377049f176fedd3fb41002856bce3095c8e0e65ab19a1ba597e277dc29de06d569e3c138421c30db9ad9a2b694a7bac9f
SSDEEP

768:i6VVzmf7ChOY/itkm6DMywlQT/jtO3+KCM+1Nh/ity4cTsiJ923OsqUD6Q4KIbjl:i6V4feDWkm6DMy+uxn7e33JL43jC3

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4760	307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59.exe

C:\Users\Admin\AppData\Local\Temp\307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59.exe
"C:\Users\Admin\AppData\Local\Temp\307eb30c7d3640ca11f564b1dbbb7a133236c3c9b45192ddcb317477a9f54b59.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4760