bcb7398e5bde5ae530d518b3b7eed2934fbf4e59575dd7dd70846bb9d2704796

Analysis

max time kernel
39s
max time network
44s
platform
windows7_x64
resource
win7-20220812-en
resource tags

arch:x64arch:x86image:win7-20220812-enlocale:en-usos:windows7-x64system
submitted
06/12/2022, 16:15

Target

bcb7398e5bde5ae530d518b3b7eed2934fbf4e59575dd7dd70846bb9d2704796.exe
Size

529KB
MD5

d463c0554452dac4db7223be62324c37
SHA1

7eb4f59c219d841a3849908e1c7cc5594bb11805
SHA256

bcb7398e5bde5ae530d518b3b7eed2934fbf4e59575dd7dd70846bb9d2704796
SHA512

ccac5754e43cbf9214d656fcb236b920b1347aab06ef80898d8dcde60332328b52122952ae304136027d8bcf2ecaa149c7eae2696ec59804fd461bf00cbd183d
SSDEEP

12288:c+VmP4dDszXOZ/cQytyyA7LJTVj2cMssph:/4PhTqkyVN2cWp

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeIncBasePriorityPrivilege	2036	bcb7398e5bde5ae530d518b3b7eed2934fbf4e59575dd7dd70846bb9d2704796.exe

C:\Users\Admin\AppData\Local\Temp\bcb7398e5bde5ae530d518b3b7eed2934fbf4e59575dd7dd70846bb9d2704796.exe
"C:\Users\Admin\AppData\Local\Temp\bcb7398e5bde5ae530d518b3b7eed2934fbf4e59575dd7dd70846bb9d2704796.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2036