eedbbb0e84fe51518501889df45c814065a36d3e23572bd658effa4d7aa99c8c

Analysis

max time kernel
27s
max time network
32s
platform
windows7_x64
resource
win7-20230703-en
resource tags

arch:x64arch:x86image:win7-20230703-enlocale:en-usos:windows7-x64system
submitted
03/07/2023, 19:32

Target

eedbbb0e84fe51518501889df45c814065a36d3e23572bd658effa4d7aa99c8c.exe
Size

3.8MB
MD5

9f4c52ac6351cb41e222e6b5738b57c2
SHA1

d7c0026b3733cf5fb802abbbc2341e238c974699
SHA256

eedbbb0e84fe51518501889df45c814065a36d3e23572bd658effa4d7aa99c8c
SHA512

ffbd5427ae10148d87e8b33c16b31edfcdf795720afefc8cabdf5ebf47767b19695fa2854c5b4797395ce973e369dbba8f319c9229360a5db6ad42ee79d14166
SSDEEP

98304:EWzQ8D2cmIx8Bb+oHakIR2rCxEUsOE8LCPMp63/TJn:rGT5w2Ty2Pl3/TJn

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeSecurityPrivilege	2096	eedbbb0e84fe51518501889df45c814065a36d3e23572bd658effa4d7aa99c8c.exe
Token: SeDebugPrivilege	2096	eedbbb0e84fe51518501889df45c814065a36d3e23572bd658effa4d7aa99c8c.exe

C:\Users\Admin\AppData\Local\Temp\eedbbb0e84fe51518501889df45c814065a36d3e23572bd658effa4d7aa99c8c.exe
"C:\Users\Admin\AppData\Local\Temp\eedbbb0e84fe51518501889df45c814065a36d3e23572bd658effa4d7aa99c8c.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2096