ed8e52f17fe9664126caab75b9cc0f1f392e2eb035e249bd80bbf9d7b6255b6d

Analysis

max time kernel
117s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
16/06/2023, 04:55

Target

ed8e52f17fe9664126caab75b9cc0f1f392e2eb035e249bd80bbf9d7b6255b6d.exe
Size

2.6MB
MD5

79209df35776e38e3374bf8420327c9d
SHA1

d5323c6a0ecb6ad05c773db2683eede2b36def3d
SHA256

ed8e52f17fe9664126caab75b9cc0f1f392e2eb035e249bd80bbf9d7b6255b6d
SHA512

dcbd474617e1dbfb570bc7aff43a613c83d28f207cb7dac4db0590718cd9938cc54aea1b4b32efd29a51fa126b0d5fe623d3131fc680c9220ea7ebf050f1c94d
SSDEEP

49152:WCTGdLjfGSOyJ1Qe7x2FmnyGRm5su3a1J4kF3iSLrXMbsNOVbIUeSKw6ZV:bCpB2QndRaz3a1eTS/Ih8bw6P

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeTcbPrivilege	3704	ed8e52f17fe9664126caab75b9cc0f1f392e2eb035e249bd80bbf9d7b6255b6d.exe
Token: SeDebugPrivilege	3704	ed8e52f17fe9664126caab75b9cc0f1f392e2eb035e249bd80bbf9d7b6255b6d.exe

C:\Users\Admin\AppData\Local\Temp\ed8e52f17fe9664126caab75b9cc0f1f392e2eb035e249bd80bbf9d7b6255b6d.exe
"C:\Users\Admin\AppData\Local\Temp\ed8e52f17fe9664126caab75b9cc0f1f392e2eb035e249bd80bbf9d7b6255b6d.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3704