a77b6d1a4b35d1d38bc82f1f3d9b4bcc34eed8ecee6a957438616ae31f072d19

Analysis

max time kernel
120s
max time network
126s
platform
windows7_x64
resource
win7-20230712-en
resource tags

arch:x64arch:x86image:win7-20230712-enlocale:en-usos:windows7-x64system
submitted
31/08/2023, 15:28 UTC

Target

f1a1557ae66d76b998f9fa95b41ee08a_mafia_JC.exe
Size

289KB
MD5

f1a1557ae66d76b998f9fa95b41ee08a
SHA1

098e443f6d50697c628613bfa93bd8b9b36837ea
SHA256

a77b6d1a4b35d1d38bc82f1f3d9b4bcc34eed8ecee6a957438616ae31f072d19
SHA512

216832f4856e4f9b895667010a8ea4ca32a80eaecae32f4dd1cac3a646fd73824526cf5396f768f4e55856ba7683981405703bdcb0c5c0b606a29b4a1542dee6
SSDEEP

6144:vVgzu7KHXjV8DyJCvok0Tx8WRtvYTBwmgKSm:dgzu7KHX+DyJCvok+x8WRtvYT+QSm

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2392	f1a1557ae66d76b998f9fa95b41ee08a_mafia_JC.exe

C:\Users\Admin\AppData\Local\Temp\f1a1557ae66d76b998f9fa95b41ee08a_mafia_JC.exe
"C:\Users\Admin\AppData\Local\Temp\f1a1557ae66d76b998f9fa95b41ee08a_mafia_JC.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2392