b2d9895d37ac7bc4618af62e42463a75449473b9355315f6e13300ed90aba34f

Analysis

max time kernel
61s
max time network
99s
platform
windows7_x64
resource
win7-20230220-es
resource tags

arch:x64arch:x86image:win7-20230220-eslocale:es-esos:windows7-x64systemwindows
submitted
17/06/2023, 01:01

Target

Pizza Tower - TheFenix010/Pizza Tower - TheFenix010/PizzaTower.exe
Size

6.7MB
MD5

2f7b788caca5b7377fbd78ec311f4dfc
SHA1

858d6eedfb5e0a94646c5fff7cc8e89d3df69d35
SHA256

51fcebe74e2d27e5ae84492621eabcff3ba746b5a22807e0e61fdf892decdb5f
SHA512

29c19f0a4a5f098112d7d7d1a8818a59915de8656665af88993f710fb1427893f3aafa33706b594c4c4f622b541a4b5e8c5b643557e953e1fe7ad905805ed50d
SSDEEP

196608:E11sYP7pFubcekPZlyoFutmDGjNARKM1AmgDp37I0:GXDGd3H1N

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	1472	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1472	AUDIODG.EXE
Token: 33	1472	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1472	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
1268	PizzaTower.exe
1268	PizzaTower.exe

C:\Users\Admin\AppData\Local\Temp\Pizza Tower - TheFenix010\Pizza Tower - TheFenix010\PizzaTower.exe
"C:\Users\Admin\AppData\Local\Temp\Pizza Tower - TheFenix010\Pizza Tower - TheFenix010\PizzaTower.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1268

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x1a8
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1472

memory/1268-70-0x000007FFFFFA0000-0x000007FFFFFB0000-memory.dmp

Filesize
64KB

Download
memory/1268-88-0x000007FFFFF70000-0x000007FFFFF80000-memory.dmp

Filesize
64KB

Download