c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34

Analysis

max time kernel
119s
max time network
125s
platform
windows7_x64
resource
win7-20230831-en
resource tags

arch:x64arch:x86image:win7-20230831-enlocale:en-usos:windows7-x64system
submitted
13/10/2023, 04:47

Target

c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe
Size

675KB
MD5

90d1387b66d1c4d696958e6037af529a
SHA1

f3dc82ee35eb2077195436f0bf90594d2e2c8ab5
SHA256

c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34
SHA512

23594ca2367033b3be9cff3dc966e988adaacda4a43922ad22110d9dfbbeddda17e6d9c5276a37601e63b43d3ba9eaca6f45ad37d6ba0c9ed555a0f10cda8741
SSDEEP

6144:OfsSZ3Hgsv4vcgcQUiZ+Mibq3Al0n7NUiqv1dXqowvwrYKMfcw/Fzzn:OfsStAU4VcQ/ZfiOIW7NUevWrM9n

Score

1^/10

Suspicious use of AdjustPrivilegeToken 7 IoCs

description	pid	Process
Token: SeRestorePrivilege	1668	c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe
Token: SeRestorePrivilege	1668	c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe
Token: SeRestorePrivilege	1668	c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe
Token: SeRestorePrivilege	1668	c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe
Token: SeRestorePrivilege	1668	c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe
Token: SeRestorePrivilege	1668	c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe
Token: SeRestorePrivilege	1668	c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe

C:\Users\Admin\AppData\Local\Temp\c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe
"C:\Users\Admin\AppData\Local\Temp\c3f7abf040275768acc81089b68c3e1e3d74e5958d8b74433fb59f8356fb1b34.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1668