c615333622c446b8682aae839379e325d8c9799f5d2829acb02904620342f977

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
22/12/2023, 14:00

Target

b46da5fa5a3048a75e13cde46a651dc8.exe
Size

2.3MB
MD5

b46da5fa5a3048a75e13cde46a651dc8
SHA1

71914a88f7f5d9fe2275c61b0e8d810a2b5c0397
SHA256

c615333622c446b8682aae839379e325d8c9799f5d2829acb02904620342f977
SHA512

732cbabc162912bc9329478f5ef139442b6dc4273e995cd5838b65eeda2244417569ba916ca3ee6c768a38c0b060e735d83366eea7b13c5d2c7301bd52409b23
SSDEEP

49152:NOpIR8LDkYOMwwnMb4PmyVI/4MnYYJ2ZhqSGLHkJEMy:kIi0YOXwnS4rVpIDQy

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2928	b46da5fa5a3048a75e13cde46a651dc8.exe

C:\Users\Admin\AppData\Local\Temp\b46da5fa5a3048a75e13cde46a651dc8.exe
"C:\Users\Admin\AppData\Local\Temp\b46da5fa5a3048a75e13cde46a651dc8.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2928