107763399ffce1e2a2eb0ae388bc5b54d4613073baba3c804eb608f723027ea9

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
25/12/2023, 08:08

Target

1103d3fd92a1511f3768527951592e3f.exe
Size

289KB
MD5

1103d3fd92a1511f3768527951592e3f
SHA1

2992cec26d33e2087026f905f9710cf2360aa57b
SHA256

107763399ffce1e2a2eb0ae388bc5b54d4613073baba3c804eb608f723027ea9
SHA512

fd527f91e787ea24c3b205cfda6741541c8fa96ed3a2e9cdea314e80341c8697a8ffa14c868b0b89d7143090ee129a5058e497b489333859494c399bbb192b4d
SSDEEP

6144:3Ui0aRHUY1vjapGWCNp/G2H+tv0TBZv4KuJ1:ki0aRHUAjapGWCNp/G2H+tv0TPduJ1

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2364	1103d3fd92a1511f3768527951592e3f.exe

C:\Users\Admin\AppData\Local\Temp\1103d3fd92a1511f3768527951592e3f.exe
"C:\Users\Admin\AppData\Local\Temp\1103d3fd92a1511f3768527951592e3f.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2364