3e72816a9d02aa5362b7c847715c8cc51a7599add9c00c36b71b4273583eedff

Analysis

max time kernel
118s
max time network
129s
platform
windows10-2004_x64
resource
win10v2004-20231222-en
resource tags

arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
submitted
26-12-2023 02:52

Target

4dfe10b29b0ed37561c67b9600d2f297.exe
Size

124KB
MD5

4dfe10b29b0ed37561c67b9600d2f297
SHA1

49555dc25fd55b659a25aa4246dffaabbb40111a
SHA256

3e72816a9d02aa5362b7c847715c8cc51a7599add9c00c36b71b4273583eedff
SHA512

c6f19bebf9c08a3991c998fcba35c0be73ed491d4ca018f913354ca63021a48a2fc7ff9d966a2291cade6c86ac8f8a56face83f2b774241efc3c11c039d21bdd
SSDEEP

1536:AGUyoXNP0YiEoyTol4XDL0iXd3ox3mIlpJ4Cd4wFsM2bPc9BTQC:4yoXNPTYA4kd3oplddSM2Pc91X

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1088	4dfe10b29b0ed37561c67b9600d2f297.exe

C:\Users\Admin\AppData\Local\Temp\4dfe10b29b0ed37561c67b9600d2f297.exe
"C:\Users\Admin\AppData\Local\Temp\4dfe10b29b0ed37561c67b9600d2f297.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1088