Analysis
-
max time kernel
144s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20231222-en -
resource tags
-
submitted
29-12-2023 22:10
General
-
Target
0541439ad6ba25d3e28359a6aa2095e7.exe
-
Size
345KB
-
MD5
0541439ad6ba25d3e28359a6aa2095e7
-
SHA1
6bc66fc6c6b39020e27eb0b3a14add7b459d58a4
-
SHA256
05ba39adae3c581775029e27577e18bd3dbc78dcb2d0668a468179debc10b743
-
SHA512
4856f2798704d6bc9ef9d5052592606392ba71f47ebbee3b05716aed1de00b397632d64d716d5b9b357317e96a82841f7ab790574a714c8524586cbd9e84194d
-
SSDEEP
6144:CNZd31PuSc5Y52Dt3VHhI1CztOz+PTdi2ltjv//E87YzTBIxEwnTefRp:CTd31PuIqt3gCEzoR7YzTKafz
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\0541439ad6ba25d3e28359a6aa2095e7.exe"C:\Users\Admin\AppData\Local\Temp\0541439ad6ba25d3e28359a6aa2095e7.exe"1⤵
- Suspicious use of AdjustPrivilegeToken