b2d9895d37ac7bc4618af62e42463a75449473b9355315f6e13300ed90aba34f

Analysis

max time kernel
89s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20230221-es
resource tags

arch:x64arch:x86image:win10v2004-20230221-eslocale:es-esos:windows10-2004-x64systemwindows
submitted
17/06/2023, 01:01

Target

Pizza Tower - TheFenix010/Pizza Tower - TheFenix010/PizzaTower.exe
Size

6.7MB
MD5

2f7b788caca5b7377fbd78ec311f4dfc
SHA1

858d6eedfb5e0a94646c5fff7cc8e89d3df69d35
SHA256

51fcebe74e2d27e5ae84492621eabcff3ba746b5a22807e0e61fdf892decdb5f
SHA512

29c19f0a4a5f098112d7d7d1a8818a59915de8656665af88993f710fb1427893f3aafa33706b594c4c4f622b541a4b5e8c5b643557e953e1fe7ad905805ed50d
SSDEEP

196608:E11sYP7pFubcekPZlyoFutmDGjNARKM1AmgDp37I0:GXDGd3H1N

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1548	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1548	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4996	PizzaTower.exe
4996	PizzaTower.exe

C:\Users\Admin\AppData\Local\Temp\Pizza Tower - TheFenix010\Pizza Tower - TheFenix010\PizzaTower.exe
"C:\Users\Admin\AppData\Local\Temp\Pizza Tower - TheFenix010\Pizza Tower - TheFenix010\PizzaTower.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:4996

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x498 0x4a0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1548