3fa0309e283cc228908957d8fe813514dd45a9a67e7c137a917aaf0042686e5f

Analysis

max time kernel
150s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
22/12/2023, 16:32

Target

f25e19e5afff932f4f9eb496afff96d4.exe
Size

1.8MB
MD5

f25e19e5afff932f4f9eb496afff96d4
SHA1

fa926c55fefa77e560a2bf5eb4859a6d5f31eb86
SHA256

3fa0309e283cc228908957d8fe813514dd45a9a67e7c137a917aaf0042686e5f
SHA512

8a7b22e5d165ae7af695f7ae3c539166a54ca0b27067a3f94047bd26d6314fc99d7c2755df2f41d1e50aded376f1ecd2d22e1601dd29412af7e0a49e75d5ebcb
SSDEEP

49152:NOf4CIabjKoh9WQwnNTB7DtoZCoJdXN0BMOwLloBrug:WIabjKoh9W/g3JdXN0B7+s

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4964	f25e19e5afff932f4f9eb496afff96d4.exe

C:\Users\Admin\AppData\Local\Temp\f25e19e5afff932f4f9eb496afff96d4.exe
"C:\Users\Admin\AppData\Local\Temp\f25e19e5afff932f4f9eb496afff96d4.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4964