85f58b1de12c634fd08012f2147035c7e73dfb6e51263da53684cc3efd4f099d

Analysis

max time kernel
191s
max time network
213s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
01-12-2022 07:07

Target

85f58b1de12c634fd08012f2147035c7e73dfb6e51263da53684cc3efd4f099d.exe
Size

562KB
MD5

0503b09480f06d65fff3cbe3dfdb0530
SHA1

4a364ae80c8c8480efe7f3ea9269ff23265fed30
SHA256

85f58b1de12c634fd08012f2147035c7e73dfb6e51263da53684cc3efd4f099d
SHA512

09d11f13301a9ff2c1c6f4fa617c6724b2e662cdf117fb5f09c903f149e7221ceac20b04ab866f54fa8fd8883d43c23d1a8b1a8190c8661f5948e144a3cb00ad
SSDEEP

12288:TnpaODJZfcaxqAiRKsaYgApC1rnlTil/:TjqAiNVi1zNi

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1144	85f58b1de12c634fd08012f2147035c7e73dfb6e51263da53684cc3efd4f099d.exe

C:\Users\Admin\AppData\Local\Temp\85f58b1de12c634fd08012f2147035c7e73dfb6e51263da53684cc3efd4f099d.exe
"C:\Users\Admin\AppData\Local\Temp\85f58b1de12c634fd08012f2147035c7e73dfb6e51263da53684cc3efd4f099d.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1144