968405898d4f11a66500934adac56c6f6f7d072ed7a4dc034b414fb778acf196

Analysis

max time kernel
149s
max time network
181s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
29/11/2022, 04:58

Target

968405898d4f11a66500934adac56c6f6f7d072ed7a4dc034b414fb778acf196.exe
Size

787KB
MD5

15b3d331e6fbaae76bb524061c4867c4
SHA1

77057f4a2fbdd241847c6761d886924aa7f173b2
SHA256

968405898d4f11a66500934adac56c6f6f7d072ed7a4dc034b414fb778acf196
SHA512

f914b13d91652051e42d99843e87a58bde3e95520ec770fc63a22be6b8d91420abea4dfb20f6803c562e095c33f77fee102000f10febfe43a3c5e241ca1c4eaa
SSDEEP

24576:ajqAiE5w607JvZoyANBd/0EMTolo95SGRKc+vV8A9MAym:a2Aih7W0EaoubSwKc+vSA9MXm

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4636	968405898d4f11a66500934adac56c6f6f7d072ed7a4dc034b414fb778acf196.exe

C:\Users\Admin\AppData\Local\Temp\968405898d4f11a66500934adac56c6f6f7d072ed7a4dc034b414fb778acf196.exe
"C:\Users\Admin\AppData\Local\Temp\968405898d4f11a66500934adac56c6f6f7d072ed7a4dc034b414fb778acf196.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4636