c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005

Analysis

max time kernel
132s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 16:11

Target

c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe
Size

25KB
MD5

4a32316ee95809b70855b760188896a2
SHA1

283c9fb0b15ea0e50f984bd949dd4675db911e74
SHA256

c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005
SHA512

d69c0f7ab21ad8af867eaa8f455b0f1093ce72db102ce5d1c7a4f79309f3757878569a63959c0ef8b7a8fb49c3f9d23aafc626e9bad9a1db175ec4d5b7038fd6
SSDEEP

384:VBFfzhXJJ3Qd4Lta43+Jddr8dJ0x9CAoikpYh2dCobZpBb:1fzhXUdW/3f7vikpYepBb

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3172	c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe

C:\Users\Admin\AppData\Local\Temp\c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe
"C:\Users\Admin\AppData\Local\Temp\c09b7327424070d90ec4daf6af3938626b7424f6e07dcfc8e33a72a9856ff005.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3172