2402e915b78515188be4e2f9aeb71f32e541cd18873d77bdf5e6e91c7781b605

Analysis

max time kernel
145s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
25/12/2023, 10:58

Target

18f7149c963a58869dcc3881f2c50aed.exe
Size

345KB
MD5

18f7149c963a58869dcc3881f2c50aed
SHA1

cbe46f4bfdaa933385bf4f5f1b1d9b693e4180a3
SHA256

2402e915b78515188be4e2f9aeb71f32e541cd18873d77bdf5e6e91c7781b605
SHA512

58b95e0338366bddd949e814c87e032b23d4ec9db5418cb6770b706cb37494dd046ae91338e5d5380df8682b3d9517ffba86cdaef4711b99a978f7ee7fc0e9a3
SSDEEP

6144:dNZd31PuSc5Y52Dt3VHhI1CztOz+PTdi2ltjv//E87YzTBIxEwVTYfRb:dTd31PuIqt3gCEzoR7YzTKyfB

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2548	18f7149c963a58869dcc3881f2c50aed.exe

C:\Users\Admin\AppData\Local\Temp\18f7149c963a58869dcc3881f2c50aed.exe
"C:\Users\Admin\AppData\Local\Temp\18f7149c963a58869dcc3881f2c50aed.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2548