961afc96feeb14d5f96084bc8edd02a6a964471491e3e95ff07e71e12c213ac4

Analysis

max time kernel
176s
max time network
203s
platform
windows10-2004_x64
resource
win10v2004-20221111-en
resource tags

arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 09:35

Target

961afc96feeb14d5f96084bc8edd02a6a964471491e3e95ff07e71e12c213ac4.exe
Size

169KB
MD5

63664ef163365d8a518f21c6ecb43241
SHA1

53cb38c8378a8de2e82f708785e71942415f563e
SHA256

961afc96feeb14d5f96084bc8edd02a6a964471491e3e95ff07e71e12c213ac4
SHA512

421f6b3f8aa95b520c2e49361a674b35cd05948d30cff5dfc84ac9f9b58ebd8feb7b0374bffbd9c4423c603a3f7464257d487829d3b0a21c813aeca7e49a939c
SSDEEP

3072:c0YMrLNiCL2VtLdJjrVjoH5ZgBZfKtq35oiggC9hsfieu18z6oHSzqc+dT:cBMHNiC6LLvjrVjoHiyQQgC9hgE6z6ob

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSystemtimePrivilege	3092	961afc96feeb14d5f96084bc8edd02a6a964471491e3e95ff07e71e12c213ac4.exe

C:\Users\Admin\AppData\Local\Temp\961afc96feeb14d5f96084bc8edd02a6a964471491e3e95ff07e71e12c213ac4.exe
"C:\Users\Admin\AppData\Local\Temp\961afc96feeb14d5f96084bc8edd02a6a964471491e3e95ff07e71e12c213ac4.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3092