55dad181ae960c72358c7567b0a79e31c4a4f47fed9005ac8ed789449666534a

Analysis

max time kernel
150s
max time network
156s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 22:17

Target

3f8446fa1599a336632b38046241d6fc.exe
Size

65KB
MD5

3f8446fa1599a336632b38046241d6fc
SHA1

d9456f1be2af82145ca2bf207a9b3ea8297fbc7e
SHA256

55dad181ae960c72358c7567b0a79e31c4a4f47fed9005ac8ed789449666534a
SHA512

13a2c519bb26c40049a79a0dacf75766399c4a9aed4a91a8ac5e202e032ef8ee52c143445b79940993d0b021427566aa1bee0568e80f73b690005d2d37d64c27
SSDEEP

1536:18xfRb7rcmC2/dHcjfU3tRPzkXdLLel6rJZBm+1:GT7C2lgst9QtLLzJZV

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1556	3f8446fa1599a336632b38046241d6fc.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 1556 wrote to memory of 1544	1556	3f8446fa1599a336632b38046241d6fc.exe	90
PID 1556 wrote to memory of 1544	1556	3f8446fa1599a336632b38046241d6fc.exe	90
PID 1556 wrote to memory of 1544	1556	3f8446fa1599a336632b38046241d6fc.exe	90
PID 1556 wrote to memory of 2080	1556	3f8446fa1599a336632b38046241d6fc.exe	91
PID 1556 wrote to memory of 2080	1556	3f8446fa1599a336632b38046241d6fc.exe	91
PID 1556 wrote to memory of 2080	1556	3f8446fa1599a336632b38046241d6fc.exe	91

C:\Users\Admin\AppData\Local\Temp\3f8446fa1599a336632b38046241d6fc.exe
"C:\Users\Admin\AppData\Local\Temp\3f8446fa1599a336632b38046241d6fc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1556
- C:\Users\Admin\AppData\Local\Temp\3f8446fa1599a336632b38046241d6fc.exe
  C:\Users\Admin\AppData\Local\Temp\3f8446fa1599a336632b38046241d6fc.exe
  2⤵
  PID:1544
- C:\Users\Admin\AppData\Local\Temp\3f8446fa1599a336632b38046241d6fc.exe
  C:\Users\Admin\AppData\Local\Temp\3f8446fa1599a336632b38046241d6fc.exe
  2⤵
  PID:2080

memory/1556-0-0x0000000074B40000-0x00000000752F0000-memory.dmp

Filesize
7.7MB

Download
memory/1556-1-0x00000000000C0000-0x00000000000D8000-memory.dmp

Filesize
96KB

Download
memory/1556-2-0x0000000004AD0000-0x0000000004B6C000-memory.dmp

Filesize
624KB

Download
memory/1556-4-0x0000000074B40000-0x00000000752F0000-memory.dmp

Filesize
7.7MB

Download