3fa5b562b4b4346b8bd30916e60bf1f27c2ab0c238a4125dc1e5929b012550b9

Analysis

max time kernel
151s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20230915-en
resource tags

arch:x64arch:x86image:win10v2004-20230915-enlocale:en-usos:windows10-2004-x64system
submitted
12/10/2023, 16:41

Target

3fa5b562b4b4346b8bd30916e60bf1f27c2ab0c238a4125dc1e5929b012550b9.exe
Size

158KB
MD5

1115e0f11ffa39ae40331c8bab508e4a
SHA1

2d5e36ceb19483b47b65623907017e7b9fc6811a
SHA256

3fa5b562b4b4346b8bd30916e60bf1f27c2ab0c238a4125dc1e5929b012550b9
SHA512

d4acb4108cb7462ed7f847321752ba46302f29d11bb34c7aa9ff3f615340ff86ab1d47d2a86ce4e0bbafcd5b38e8a8b57cfa5779baac229b0b85ba6da5852056
SSDEEP

3072:wIIIIgj+l+vGaEEXix8jYBPi/3KCz8ATZgwTioePvG5lUnglIElz:wIIIIgj+RaEiixkYB6fKmYwTXZ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeBackupPrivilege	4236	3fa5b562b4b4346b8bd30916e60bf1f27c2ab0c238a4125dc1e5929b012550b9.exe

C:\Users\Admin\AppData\Local\Temp\3fa5b562b4b4346b8bd30916e60bf1f27c2ab0c238a4125dc1e5929b012550b9.exe
"C:\Users\Admin\AppData\Local\Temp\3fa5b562b4b4346b8bd30916e60bf1f27c2ab0c238a4125dc1e5929b012550b9.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4236