71c4ec9675523146c3a2e03c81711fee316dd45b255c8e84b673c0430636641a

Analysis

max time kernel
124s
max time network
176s
platform
windows10-1703_x64
resource
win10-20230220-en
resource tags

arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
submitted
31-03-2023 21:26

Target

Pizza.Tower.v1.0.311/Pizza.Tower.v1.0.311/PizzaTower.exe
Size

6.7MB
MD5

2f7b788caca5b7377fbd78ec311f4dfc
SHA1

858d6eedfb5e0a94646c5fff7cc8e89d3df69d35
SHA256

51fcebe74e2d27e5ae84492621eabcff3ba746b5a22807e0e61fdf892decdb5f
SHA512

29c19f0a4a5f098112d7d7d1a8818a59915de8656665af88993f710fb1427893f3aafa33706b594c4c4f622b541a4b5e8c5b643557e953e1fe7ad905805ed50d
SSDEEP

196608:E11sYP7pFubcekPZlyoFutmDGjNARKM1AmgDp37I0:GXDGd3H1N

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

AUDIODG.EXE

description pid process

Token: 33 3748 AUDIODG.EXE
Token: SeIncBasePriorityPrivilege 3748 AUDIODG.EXE
Suspicious use of SetWindowsHookEx 2 IoCs

Processes:

PizzaTower.exe

pid process

3820 PizzaTower.exe
3820 PizzaTower.exe

description	pid	process
Token: 33	3748	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3748	AUDIODG.EXE

pid	process
3820	PizzaTower.exe
3820	PizzaTower.exe

C:\Users\Admin\AppData\Local\Temp\Pizza.Tower.v1.0.311\Pizza.Tower.v1.0.311\PizzaTower.exe
"C:\Users\Admin\AppData\Local\Temp\Pizza.Tower.v1.0.311\Pizza.Tower.v1.0.311\PizzaTower.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3820

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x3d0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3748