2894965f5a27338d06b6b4f2478d58e6bfd9e89b8623b5b4cc95e7d4b3e3a2da

Analysis

max time kernel
28s
max time network
30s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
19/12/2022, 18:40

Target

2894965f5a27338d06b6b4f2478d58e6bfd9e89b8623b5b4cc95e7d4b3e3a2da.exe
Size

196KB
MD5

8ea8fd14c8e7433829e76518be27c1d6
SHA1

335399e9b1a9537e9dce7fb2f2c6e2db5fd2a0f2
SHA256

2894965f5a27338d06b6b4f2478d58e6bfd9e89b8623b5b4cc95e7d4b3e3a2da
SHA512

8a3d9eb77282f864d9608a9fd6f7b54a222dfd69fbbca66a6dcbf07176637a306d92671468b28d74a6c605cafbb6a67c2dda587b4f268e0e7cf60d021edb5af4
SSDEEP

3072:BbXrxC82s5AQ4J5HHG+CynlfvltWmvORQPYyZBLRLpwW8J/H3GMMNTy:7CxlHL5jAMD1D8JWMMN

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1972	2894965f5a27338d06b6b4f2478d58e6bfd9e89b8623b5b4cc95e7d4b3e3a2da.exe

C:\Users\Admin\AppData\Local\Temp\2894965f5a27338d06b6b4f2478d58e6bfd9e89b8623b5b4cc95e7d4b3e3a2da.exe
"C:\Users\Admin\AppData\Local\Temp\2894965f5a27338d06b6b4f2478d58e6bfd9e89b8623b5b4cc95e7d4b3e3a2da.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1972