a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8

Analysis

max time kernel
144s
max time network
183s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
04/12/2022, 13:06

Target

a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8.exe
Size

136KB
MD5

927b2ac03d5e89d9ebdb44d36fac2560
SHA1

129c2b719714a9b7d4ede0a01f7c891cdb4d300f
SHA256

a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8
SHA512

95eb357d78250638b2332b90659571a5b7b6506adb99a4a8d4d8d24f9679b955ef98a7eef0df9186e6121be1189525280f1b3dae79239d25c492342fc69b8caa
SSDEEP

3072:sMhKbq00qawM7pjz+QSKrETGrWI6IS+vfpQTB9/vo9eR05ir:3hKmt1/EIi+5QHvobir

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSystemtimePrivilege	4940	a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8.exe

C:\Users\Admin\AppData\Local\Temp\a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8.exe
"C:\Users\Admin\AppData\Local\Temp\a59a25b6f8e58ef8b47214629dfbc6ed56d54585032d6a369280705afcce30f8.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4940