c3ef770f1115e1ff7feab96e262a0406655ae905f6a931bae7fa937e9190c3e5

Analysis

max time kernel
148s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
06/12/2022, 19:12

Target

c3ef770f1115e1ff7feab96e262a0406655ae905f6a931bae7fa937e9190c3e5.exe
Size

123KB
MD5

b0c5eca7a34a8d4f6ad30c8a40b3a3e6
SHA1

989920825373c3eb7b061f510005ca6ef34f60bf
SHA256

c3ef770f1115e1ff7feab96e262a0406655ae905f6a931bae7fa937e9190c3e5
SHA512

516001470bbe5fc4773bd06060105405e4b993b1d15ecf13d18c92d875165e03ca5441c746e4a12275b840c93a7e56ea831a327aff4751faa4143161a7b32f75
SSDEEP

3072:ghnxonDFyw/oZ1FKBPOIUkoQQ4ml79B8gvuBmx:jQwgYPOBkhQ4ml79aSo

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4528	c3ef770f1115e1ff7feab96e262a0406655ae905f6a931bae7fa937e9190c3e5.exe

C:\Users\Admin\AppData\Local\Temp\c3ef770f1115e1ff7feab96e262a0406655ae905f6a931bae7fa937e9190c3e5.exe
"C:\Users\Admin\AppData\Local\Temp\c3ef770f1115e1ff7feab96e262a0406655ae905f6a931bae7fa937e9190c3e5.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4528