c9a337bfc0f510d096cf2513fd4f70eb413adb026f160a8ffa1687ed7491a884

Analysis

max time kernel
37s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 15:06

Target

c9a337bfc0f510d096cf2513fd4f70eb413adb026f160a8ffa1687ed7491a884.exe
Size

121KB
MD5

2a2f485f56369a5c31a5fdf57f9f6c0a
SHA1

e8ac89a7cd3323870e0ea7ff2f7b16fb8fbb01cb
SHA256

c9a337bfc0f510d096cf2513fd4f70eb413adb026f160a8ffa1687ed7491a884
SHA512

3f33fa1b195a8961fd2032536c61514e8a7c9ac172493de1187bee45f98a57de0d30f82ef2c92b7464d408f524bbd617ed7b0f3117aba9cafbf14ea3a2732246
SSDEEP

1536:sPb6KZz8rsJr7Z20SS5RMPaoOYZTyxPic5e+RUh3G8xh1E8IW+v7suvmJYSSXssm:mJr7oS5mbyxtsLPtIW+Ts4mJdfc1JZU

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	696	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	696	AUDIODG.EXE
Token: 33	696	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	696	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\c9a337bfc0f510d096cf2513fd4f70eb413adb026f160a8ffa1687ed7491a884.exe
"C:\Users\Admin\AppData\Local\Temp\c9a337bfc0f510d096cf2513fd4f70eb413adb026f160a8ffa1687ed7491a884.exe"
1⤵
PID:1504

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x1ac
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:696