8c563f88105ca8a8bde0f726dcdef22faf90a7e51aae9316a226bb70d4dd0bbf

Analysis

max time kernel
117s
max time network
122s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
11/10/2023, 11:47

Target

8c563f88105ca8a8bde0f726dcdef22faf90a7e51aae9316a226bb70d4dd0bbf.exe
Size

1.4MB
MD5

c53bf2c253179d06c3ac2b8a71952508
SHA1

8ebaa88e580fe97e6a1a7a2f4dd559f7de17886e
SHA256

8c563f88105ca8a8bde0f726dcdef22faf90a7e51aae9316a226bb70d4dd0bbf
SHA512

a87ad5093cc08e0cdb13ae1441d7e2ad8a4d22020d8c8d8d4e3315b4f9944fd842b25c611c98ac73a6d730ba619edc4a8c2e4e35ad872cfa549d1107879afca0
SSDEEP

24576:Z7zNkhm5PBnS/TwSfVcYG3K/cJHlnFR+IGNe8j3Iz:VNEm5ZnSLNiXicJFFRGNzj3

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	1988	8c563f88105ca8a8bde0f726dcdef22faf90a7e51aae9316a226bb70d4dd0bbf.exe

C:\Users\Admin\AppData\Local\Temp\8c563f88105ca8a8bde0f726dcdef22faf90a7e51aae9316a226bb70d4dd0bbf.exe
"C:\Users\Admin\AppData\Local\Temp\8c563f88105ca8a8bde0f726dcdef22faf90a7e51aae9316a226bb70d4dd0bbf.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1988

memory/1988-0-0x0000000000400000-0x000000000061C000-memory.dmp

Filesize
2.1MB

Download
memory/1988-1-0x0000000000240000-0x00000000002A6000-memory.dmp

Filesize
408KB

Download
memory/1988-6-0x0000000000240000-0x00000000002A6000-memory.dmp

Filesize
408KB

Download
memory/1988-7-0x0000000000240000-0x00000000002A6000-memory.dmp

Filesize
408KB

Download
memory/1988-11-0x0000000000400000-0x000000000061C000-memory.dmp

Filesize
2.1MB

Download