3f38e432c54ef1b47c8c16790a792c12f49f21498a0bc27c68bc96a74a25f9bf

Analysis

max time kernel
181s
max time network
187s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01/12/2022, 05:37

Target

3f38e432c54ef1b47c8c16790a792c12f49f21498a0bc27c68bc96a74a25f9bf.exe
Size

1.3MB
MD5

c7953d43d7ed50b4259193ed31c21bb0
SHA1

624f94d8e955c6211f00775a71828f42ca9f1256
SHA256

3f38e432c54ef1b47c8c16790a792c12f49f21498a0bc27c68bc96a74a25f9bf
SHA512

b6ac3e68007d2404bd45b351f5f4ee508ebfd4ac70e56b296b4a58473a6097b10b2db1a9c75830df5769bbf78a07a2a265075eafc1a7fe9fdd161596a1f24801
SSDEEP

24576:0jqAiu1IG0C0UbaOLDmEcoVxANz+v67TVpzEKXpkZZ01J:02AiFSDENzx7vY4

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1744	3f38e432c54ef1b47c8c16790a792c12f49f21498a0bc27c68bc96a74a25f9bf.exe

C:\Users\Admin\AppData\Local\Temp\3f38e432c54ef1b47c8c16790a792c12f49f21498a0bc27c68bc96a74a25f9bf.exe
"C:\Users\Admin\AppData\Local\Temp\3f38e432c54ef1b47c8c16790a792c12f49f21498a0bc27c68bc96a74a25f9bf.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1744