05f94b9f285f9dcec1e8907801d2d0ca9aa226c84e3d858412b864cbc91d3066

Analysis

max time kernel
91s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
02/12/2022, 01:05

Target

05f94b9f285f9dcec1e8907801d2d0ca9aa226c84e3d858412b864cbc91d3066.exe
Size

595KB
MD5

430d2dd47fcdac1dd768aef752bbe59c
SHA1

5b36139871d9f2878653fea2ad110e34bfc9baa5
SHA256

05f94b9f285f9dcec1e8907801d2d0ca9aa226c84e3d858412b864cbc91d3066
SHA512

776d9ead87fe72bbe8d67e235e1d14e3bd5d6e8e72ebd8424f0952d747c46b5d807ea985336c8a693efecb2548bd383e8447a92c6daa6842adaab662abca91a6
SSDEEP

12288:enpaODJZfcaxqAiRfXWsDQ2U5aITOcgMEea6S4w:ejqAipmf2UoYzEea/

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	920	05f94b9f285f9dcec1e8907801d2d0ca9aa226c84e3d858412b864cbc91d3066.exe

C:\Users\Admin\AppData\Local\Temp\05f94b9f285f9dcec1e8907801d2d0ca9aa226c84e3d858412b864cbc91d3066.exe
"C:\Users\Admin\AppData\Local\Temp\05f94b9f285f9dcec1e8907801d2d0ca9aa226c84e3d858412b864cbc91d3066.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:920