d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5

Analysis

max time kernel
152s
max time network
158s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
27-11-2022 01:02

Target

d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5.exe
Size

1.8MB
MD5

2f29177aba424f4a1124d67eef56e8cd
SHA1

285b3226f97f096263cbac0a30c8b07203e930aa
SHA256

d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5
SHA512

9eebcaa8c4b5b323ff53c9b54573c94f7281252bfb23c7a707a8cbcdecd98f50b3b74e80990a2917d712fb606161dcbe9a05320c3e4320980239a77be9ba3519
SSDEEP

24576:aoHPZIofyds3TQtP+3uMz6HmAsEDWSkwtJQNDAwQNpAxnWpai52jyzMPeVjtb:aoZIcjv3uKEmaDPzUjHxnWpXUy

Score

1^/10

Suspicious use of AdjustPrivilegeToken 3 IoCs

Processes:

d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5.exe

description	pid	process
Token: SeDebugPrivilege	5000	d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5.exe
Token: 33	5000	d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5.exe
Token: SeIncBasePriorityPrivilege	5000	d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5.exe

C:\Users\Admin\AppData\Local\Temp\d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5.exe
"C:\Users\Admin\AppData\Local\Temp\d73dc4aa7ffec724b5827ff0667e2e557865649f1a47d8a6460b6abc26309bb5.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5000

memory/5000-132-0x00000000008A0000-0x0000000000A66000-memory.dmp

Filesize
1.8MB

Download
memory/5000-133-0x0000000005A00000-0x0000000005FA4000-memory.dmp

Filesize
5.6MB

Download
memory/5000-134-0x0000000005450000-0x00000000054E2000-memory.dmp

Filesize
584KB

Download
memory/5000-135-0x0000000005730000-0x00000000057CC000-memory.dmp

Filesize
624KB

Download
memory/5000-136-0x000000000A600000-0x000000000A608000-memory.dmp

Filesize
32KB

Download
memory/5000-137-0x000000000A810000-0x000000000A818000-memory.dmp

Filesize
32KB

Download
memory/5000-138-0x0000000009D90000-0x0000000009DC8000-memory.dmp

Filesize
224KB

Download
memory/5000-139-0x0000000009D70000-0x0000000009D7E000-memory.dmp

Filesize
56KB

Download