9a1dbf5e16c97c24952aeba6484d093dec1cf25e49ba1d1faf004972b58622d7

Analysis

max time kernel
149s
max time network
160s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
11/10/2023, 19:28

Target

cb66d2b9c73d40d02900d70ce3d82258.exe
Size

46KB
MD5

cb66d2b9c73d40d02900d70ce3d82258
SHA1

ddfc56b3f9c34db1a8124471835a5a7280dcf360
SHA256

9a1dbf5e16c97c24952aeba6484d093dec1cf25e49ba1d1faf004972b58622d7
SHA512

3ba7c3db066f4894fda46a422b95d9ed5e273b81c6451aef5d262b2fe2c35e8d68a35da1ea124eb03c492a8cb0998fb935e0194ad4a8e3fccf8def8d2d8d1cbf
SSDEEP

768:V/eWH8Zwtlkjwc8dlU9BvRkLASCjsbyYHBy6JQy9WD8ww200XgT8fFOMp2DviK:V/z8ZwtlPVdGEL3byId6tOu2DviK

Score

3^/10

Program crash 1 IoCs

pid	pid_target	Process	procid_target
1132	3784	WerFault.exe	29

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3784	cb66d2b9c73d40d02900d70ce3d82258.exe

C:\Users\Admin\AppData\Local\Temp\cb66d2b9c73d40d02900d70ce3d82258.exe
"C:\Users\Admin\AppData\Local\Temp\cb66d2b9c73d40d02900d70ce3d82258.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3784
- C:\Windows\SysWOW64\WerFault.exe
  C:\Windows\SysWOW64\WerFault.exe -u -p 3784 -s 2064
  2⤵
  - Program crash
  PID:1132

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3784 -ip 3784
1⤵
PID:4716

memory/3784-0-0x00000000749D0000-0x0000000075180000-memory.dmp

Filesize
7.7MB

Download
memory/3784-1-0x00000000006B0000-0x00000000006C2000-memory.dmp

Filesize
72KB

Download
memory/3784-2-0x0000000005570000-0x0000000005B14000-memory.dmp

Filesize
5.6MB

Download
memory/3784-3-0x00000000050B0000-0x0000000005142000-memory.dmp

Filesize
584KB

Download
memory/3784-4-0x00000000052A0000-0x00000000052B0000-memory.dmp

Filesize
64KB

Download
memory/3784-5-0x0000000005260000-0x000000000526A000-memory.dmp

Filesize
40KB

Download
memory/3784-6-0x00000000749D0000-0x0000000075180000-memory.dmp

Filesize
7.7MB

Download