c00a83724a4b7b90d84575fca16ff915ef106546c621113ee8e964facaf47d40

Analysis

max time kernel
147s
max time network
181s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06-12-2022 12:42

Target

c00a83724a4b7b90d84575fca16ff915ef106546c621113ee8e964facaf47d40.exe
Size

18KB
MD5

174b08d9d9bb714de054c26679bdb9fa
SHA1

24b9ce6fb9d5d0f3d9dc2b7c87746ca4d1bad58f
SHA256

c00a83724a4b7b90d84575fca16ff915ef106546c621113ee8e964facaf47d40
SHA512

c0ea57dbf679047e24c038849e96a57694166ede8b620c1525b7eb96e8d1652f451b162bb19c2600b504431bf0dd159785f772bc43a5fc2e61da464bc3d8f3b8
SSDEEP

384:ycf78sBkP9bmdRWOw6wK1s5TkLC91ooiI9pU:IsyP9bmTWL0OswBiUpU

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4384	c00a83724a4b7b90d84575fca16ff915ef106546c621113ee8e964facaf47d40.exe

C:\Users\Admin\AppData\Local\Temp\c00a83724a4b7b90d84575fca16ff915ef106546c621113ee8e964facaf47d40.exe
"C:\Users\Admin\AppData\Local\Temp\c00a83724a4b7b90d84575fca16ff915ef106546c621113ee8e964facaf47d40.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4384