7e8eab6f9495c2eb732e6bc4c05df3743aac1385d986d420af6667887799bf36

Analysis

max time kernel
91s
max time network
124s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25-12-2023 04:26

Target

0511f650608a85ba9521baa7eaae4262.exe
Size

289KB
MD5

0511f650608a85ba9521baa7eaae4262
SHA1

fd096864b26a9402b897440c500f473ddefe04c1
SHA256

7e8eab6f9495c2eb732e6bc4c05df3743aac1385d986d420af6667887799bf36
SHA512

e731e630750684336bb9ae917b864cc050177b15b2ea5c77b1bc4ea8969ae8e9af5ce1238e92fa8151601b77b169f4bf8eee52dee5835d9f6e9dc3c68a48cb9e
SSDEEP

6144:JVgzu7KHXjV8DyJCvok0Tx8WRtvYTBwmZKSZ:Hgzu7KHX+DyJCvok+x8WRtvYT+9SZ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3980	0511f650608a85ba9521baa7eaae4262.exe

C:\Users\Admin\AppData\Local\Temp\0511f650608a85ba9521baa7eaae4262.exe
"C:\Users\Admin\AppData\Local\Temp\0511f650608a85ba9521baa7eaae4262.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3980