cd8a3a4b2ff619f0e34c4ea665cbc622f0558fe2d0b86c3cb3f5d8f31af9df5d

Analysis

max time kernel
150s
max time network
227s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 12:55

Target

cd8a3a4b2ff619f0e34c4ea665cbc622f0558fe2d0b86c3cb3f5d8f31af9df5d.exe
Size

443KB
MD5

efb133325610297a37ad5c82baf81c9b
SHA1

d64a954c347763acd43865c6410be6a14aca5e38
SHA256

cd8a3a4b2ff619f0e34c4ea665cbc622f0558fe2d0b86c3cb3f5d8f31af9df5d
SHA512

5d4658ef8b268fc256ee2c676c59be851393e34492ff28cec6fdee8f67d1266a65341d97d45236bbe5c34949744b98e625e40838b024c1e7b03fb524778136fb
SSDEEP

6144:4xrRUpgVroyw6y6hKgB/nHGYvifcsiMunWF8S7axYI/flP2oEiopqAslF:4lRUpgVE6yvntuWF8j/9P5nopw

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	632	cd8a3a4b2ff619f0e34c4ea665cbc622f0558fe2d0b86c3cb3f5d8f31af9df5d.exe
Token: SeIncBasePriorityPrivilege	632	cd8a3a4b2ff619f0e34c4ea665cbc622f0558fe2d0b86c3cb3f5d8f31af9df5d.exe

C:\Users\Admin\AppData\Local\Temp\cd8a3a4b2ff619f0e34c4ea665cbc622f0558fe2d0b86c3cb3f5d8f31af9df5d.exe
"C:\Users\Admin\AppData\Local\Temp\cd8a3a4b2ff619f0e34c4ea665cbc622f0558fe2d0b86c3cb3f5d8f31af9df5d.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:632