14f91677b19b147b24bc69c1a2a07038d7bd54d80897f0efbd550fe4bfdfe0f0

Analysis

max time kernel
120s
max time network
121s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
24/12/2023, 20:56

Target

1228779dc4c4308b6d0a2b21df1b3e22.exe
Size

289KB
MD5

1228779dc4c4308b6d0a2b21df1b3e22
SHA1

b6fd77b6301c5c9e9e1372c2662b2bc3d9eadfff
SHA256

14f91677b19b147b24bc69c1a2a07038d7bd54d80897f0efbd550fe4bfdfe0f0
SHA512

5a389ad736d61db3399c00997879fe3ace3aade42f3d92e07454c1ce345868c76ed7a72246867f315136c35cdf30bf3a14d9f846733b59cdc97dbfdca246e560
SSDEEP

6144:3Ui0aRHUY1vjapGWCNp/G2H+tv0TBZv2KuJO:ki0aRHUAjapGWCNp/G2H+tv0TPnuJO

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2348	1228779dc4c4308b6d0a2b21df1b3e22.exe

C:\Users\Admin\AppData\Local\Temp\1228779dc4c4308b6d0a2b21df1b3e22.exe
"C:\Users\Admin\AppData\Local\Temp\1228779dc4c4308b6d0a2b21df1b3e22.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2348