7a674e38ad7b0e33e31258c58d1662fb2893c98688c9cf46cbfa99ab42eca79d

Analysis

max time kernel
140s
max time network
146s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
13/04/2023, 06:03

Target

b7234fe8abdff159310a7836d083181c8500fd66cd093164e7c6242e3db95bac.exe
Size

2.7MB
MD5

2799fa8aaca61c66136437058b7a4ccd
SHA1

8255919937861b42efa3e10989b547deb0a1c81d
SHA256

b7234fe8abdff159310a7836d083181c8500fd66cd093164e7c6242e3db95bac
SHA512

aedcf2c4ccdae4ad49d752683412155a1b496582370e6c9b581ee82635aa13e5bbf1c16ac7d5d24404e852249f062cea0f68c62638028e8b36b78f6cbe9a0e98
SSDEEP

49152:DtWxoxZgpJbp2wfp8SjhYVOE8Am4v4bJm5P3EC9zGjYz54/8ZJRj7:DtOhJb5pDm5/sYa/8XRX

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	1876	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1876	AUDIODG.EXE
Token: 33	1876	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1876	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1288	b7234fe8abdff159310a7836d083181c8500fd66cd093164e7c6242e3db95bac.exe
1636	b7234fe8abdff159310a7836d083181c8500fd66cd093164e7c6242e3db95bac.exe

C:\Users\Admin\AppData\Local\Temp\b7234fe8abdff159310a7836d083181c8500fd66cd093164e7c6242e3db95bac.exe
"C:\Users\Admin\AppData\Local\Temp\b7234fe8abdff159310a7836d083181c8500fd66cd093164e7c6242e3db95bac.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1288

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x484
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1876

C:\Users\Admin\AppData\Local\Temp\b7234fe8abdff159310a7836d083181c8500fd66cd093164e7c6242e3db95bac.exe
"C:\Users\Admin\AppData\Local\Temp\b7234fe8abdff159310a7836d083181c8500fd66cd093164e7c6242e3db95bac.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1636