24cec189d2bcba055649bfb30ec2083b411c50646890fe58aaf1e40776116134

Analysis

max time kernel
120s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28/12/2023, 21:53

Target

fad25cb651911f69d6616fde30df01e0.exe
Size

291KB
MD5

fad25cb651911f69d6616fde30df01e0
SHA1

5a04e2b6ce0fba161f4ca5a885231f5a12fef6a6
SHA256

24cec189d2bcba055649bfb30ec2083b411c50646890fe58aaf1e40776116134
SHA512

9d69f8fd19e7ddc74b8c56ca3ac2a4025bd613bf930b0f5649dca029f2eda23b82ef572fdf9b6b172d80e3f709a95502546893c169d949a0b58264dadc2337c3
SSDEEP

3072:4TVn+n6ibD75+xWM4+4RZ19f9pzxwHw1JdLiUKn94cMwLB5AZKhu8v5hQ8NHJOiC:6eb/RZhwHUm4cmDkPn52x

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeRestorePrivilege	2296	fad25cb651911f69d6616fde30df01e0.exe
Token: SeBackupPrivilege	2296	fad25cb651911f69d6616fde30df01e0.exe

C:\Users\Admin\AppData\Local\Temp\fad25cb651911f69d6616fde30df01e0.exe
"C:\Users\Admin\AppData\Local\Temp\fad25cb651911f69d6616fde30df01e0.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2296