7675116633f92df316276dbdfdbf5b4dbe3796f4b8e36e64ca98efd509afa8a9

Analysis

max time kernel
110s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29-11-2022 03:58

Target

7675116633f92df316276dbdfdbf5b4dbe3796f4b8e36e64ca98efd509afa8a9.exe
Size

863KB
MD5

2fcfd03fdb1347c6c16028902c734a17
SHA1

b11161fe1a817660ad93348e0c8a5abc532501a2
SHA256

7675116633f92df316276dbdfdbf5b4dbe3796f4b8e36e64ca98efd509afa8a9
SHA512

3d3579f8d8bae5a9b178edccd13a5807a547c056b8f5c756b850a48c97e9d44361041eaec99d2ddbed6b9d7b741e2b5d0866bdd442b0a7eb2b180ba795414280
SSDEEP

24576:ZC1yaLpk7rPO376zHiA6nz/0xDpQiNSbo8zfxg:ZChCrPO376zHiA6jUD+iMboo

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4800	7675116633f92df316276dbdfdbf5b4dbe3796f4b8e36e64ca98efd509afa8a9.exe

C:\Users\Admin\AppData\Local\Temp\7675116633f92df316276dbdfdbf5b4dbe3796f4b8e36e64ca98efd509afa8a9.exe
"C:\Users\Admin\AppData\Local\Temp\7675116633f92df316276dbdfdbf5b4dbe3796f4b8e36e64ca98efd509afa8a9.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4800