db2a2d7c0772591199f7d3be76fd05031487f14b888efaa626d167397130c86b

Analysis

max time kernel
150s
max time network
154s
platform
windows7_x64
resource
win7-20231023-en
resource tags

arch:x64arch:x86image:win7-20231023-enlocale:en-usos:windows7-x64system
submitted
02-12-2023 10:26

Target

e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe
Size

3.2MB
MD5

f23d61d5ff249493e4b55e0690d7b3e4
SHA1

a6eccac18cc49aa7fe3863afb24d3975a5cf30a8
SHA256

e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b
SHA512

1782f63dc64baaf47d00ad0f8cf7d04587f8da2656aedf580147387df65b9481e4fdd7a4e34c6f01dfbefc4815d42a994dc7e6e065c84d2cf9821e602ac2446f
SSDEEP

49152:3osVZWC0R4XRbTaDmixqWsOFQlrYQBDcLatzB+L0iVBH+nBz0I7C:3Z0RkRbTaDmcsOFQpEwIN+d0n

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe

description pid process

Token: SeDebugPrivilege 2004 e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe

description	pid	process
Token: SeDebugPrivilege	2004	e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe

C:\Users\Admin\AppData\Local\Temp\e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe
"C:\Users\Admin\AppData\Local\Temp\e164c86cf3eead4541a719f3cc5f08a7f0b36384fb8e95098116acadad23a69b.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2004

memory/2004-0-0x0000000074AF0000-0x00000000751DE000-memory.dmp

Filesize
6.9MB

Download
memory/2004-1-0x0000000000F30000-0x000000000119A000-memory.dmp

Filesize
2.4MB

Download
memory/2004-2-0x0000000004BE0000-0x0000000004C20000-memory.dmp

Filesize
256KB

Download
memory/2004-3-0x00000000003B0000-0x00000000003BE000-memory.dmp

Filesize
56KB

Download
memory/2004-4-0x0000000074AF0000-0x00000000751DE000-memory.dmp

Filesize
6.9MB

Download
memory/2004-5-0x0000000004BE0000-0x0000000004C20000-memory.dmp

Filesize
256KB

Download