da8c69bd57a346ffba13ebb22b6b5b96f1961714a577b6cb83a08c4ed46dc662

Analysis

max time kernel
150s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
24-09-2023 01:49

Target

da8c69bd57a346ffba13ebb22b6b5b96f1961714a577b6cb83a08c4ed46dc662.exe
Size

9.3MB
MD5

e7d29ca5df75ce668f26682075d16de1
SHA1

1722d8262be6b66475e285d18462b6c635f10321
SHA256

da8c69bd57a346ffba13ebb22b6b5b96f1961714a577b6cb83a08c4ed46dc662
SHA512

32e14805b66fd0578f088557b67ce5f8cfa7f0f5ecd6f64147480e8b7d994c8bf2221fe994765b20374dea62f62f220dc02dc52279b06dfe9251f5590e4f14fe
SSDEEP

196608:LFrL1MMBm12BO3QKp3rRVtaLjNaQpJkfK4z+7j/VEt6Yb+Gq:RCMk2BO3Q23rRVtaLjx8fK7NEtNbHq

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2140	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2140	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3576	da8c69bd57a346ffba13ebb22b6b5b96f1961714a577b6cb83a08c4ed46dc662.exe
3576	da8c69bd57a346ffba13ebb22b6b5b96f1961714a577b6cb83a08c4ed46dc662.exe

C:\Users\Admin\AppData\Local\Temp\da8c69bd57a346ffba13ebb22b6b5b96f1961714a577b6cb83a08c4ed46dc662.exe
"C:\Users\Admin\AppData\Local\Temp\da8c69bd57a346ffba13ebb22b6b5b96f1961714a577b6cb83a08c4ed46dc662.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:3576

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x42c 0x4f4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2140