496bf2545ab01a591ad0ffb3012245206e8a706457b03086f00df98fa88739d1

Analysis

max time kernel
189s
max time network
194s
platform
windows7_x64
resource
win7-20221111-en
resource tags

arch:x64arch:x86image:win7-20221111-enlocale:en-usos:windows7-x64system
submitted
01/02/2023, 02:50

Target

496bf2545ab01a591ad0ffb3012245206e8a706457b03086f00df98fa88739d1
Size

4KB
MD5

0eba8f0dd9ebc378c7e72027c137430f
SHA1

e7b9c0393412624c927f1110b830271d38433947
SHA256

496bf2545ab01a591ad0ffb3012245206e8a706457b03086f00df98fa88739d1
SHA512

2617d6dc4b86d170647bfe0d971de66023d6b7992018aab73f1f7c68e27cbb83df295a0d45468b97880d0fc0e4194f80f207d7f10fb9edbe03bdffb29ee89b3e
SSDEEP

96:zRYZxQOBpLyxIcymLKY8M991wuIaQPYPW:zRJObLyxIIYMdwuwPYPW

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	276	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	276	AUDIODG.EXE
Token: 33	276	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	276	AUDIODG.EXE

C:\Windows\system32\cmd.exe
cmd /c C:\Users\Admin\AppData\Local\Temp\496bf2545ab01a591ad0ffb3012245206e8a706457b03086f00df98fa88739d1
1⤵
PID:792

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x560
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:276