4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f

Analysis

max time kernel
140s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
18/09/2023, 07:32

Target

4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f.exe
Size

1.3MB
MD5

d644f12f9a642f3fe5dcbf315ec9094a
SHA1

c01eb2b8be44d6711c9af10ca7cc6c4310aed34c
SHA256

4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f
SHA512

f7d0f6fb7f6ad8f405083250a6530c60a624a4cd734ae53240d6789d7b9e740209e226f8821745f592895fcb14f89fc97aeabd3388beb1a60165117aedbfdcef
SSDEEP

24576:fh6DpVyRV+Gkoqn7jTZC8y8YpF98znpdIa0OTDc0MPABIEsbkW:J6NVEVgdfTQEc0p2akABch

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeBackupPrivilege	3492	4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f.exe
Token: SeRestorePrivilege	3492	4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f.exe
Token: 33	3492	4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f.exe
Token: SeIncBasePriorityPrivilege	3492	4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f.exe

C:\Users\Admin\AppData\Local\Temp\4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f.exe
"C:\Users\Admin\AppData\Local\Temp\4dcc19a5d571c5fe1e0f2e5b9134815200220a86535282f242789146fde3706f.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3492