157fe5da8fa7a08ecc37956b2eaee2a5039e6d8e997d949e8810375e5ea2f6a4

Analysis

max time kernel
140s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 03:57

Target

04381f229163b60a296dd44ebe7c43ac.exe
Size

289KB
MD5

04381f229163b60a296dd44ebe7c43ac
SHA1

027e6b24f7c926f3b615aa4b0ad971d52686b356
SHA256

157fe5da8fa7a08ecc37956b2eaee2a5039e6d8e997d949e8810375e5ea2f6a4
SHA512

35aad78373c2dbc4744427b36708f2cc8a90d45241adbafb4229f29e17ba3b4f83533dd3d00fb67c31d6e0b7a45a092abc725479d886bc0ffa26df9bddcb2e4e
SSDEEP

6144:wUi0aRHUY1vjapGWCNp/G2H+tv0TBZvpKuJxR:bi0aRHUAjapGWCNp/G2H+tv0TP4uJxR

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2120	04381f229163b60a296dd44ebe7c43ac.exe

C:\Users\Admin\AppData\Local\Temp\04381f229163b60a296dd44ebe7c43ac.exe
"C:\Users\Admin\AppData\Local\Temp\04381f229163b60a296dd44ebe7c43ac.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2120