155d0f3c6de6c28cfa8afb60f4ef2331f773597762293e6645af53ce9cda70ee

Analysis

max time kernel
210s
max time network
228s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
30/12/2023, 04:56

Target

0f3d7498ee04bf27d387cc89f2d7ce6f.exe
Size

289KB
MD5

0f3d7498ee04bf27d387cc89f2d7ce6f
SHA1

85840e6adc6d9774e4ab7c89af30e7314deaba9c
SHA256

155d0f3c6de6c28cfa8afb60f4ef2331f773597762293e6645af53ce9cda70ee
SHA512

e1d8c7ffbd965ea0cf5a76658aab00f99510a41cb5855577459a411729cb2e7e291a983198d41141b0eb4015f5d292ae0816ede9237f4cadf81abc1b8fd6f902
SSDEEP

6144:iUi0aRHUY1vjapGWCNp/G2H+tv0TBZvXKuJ2:Fi0aRHUAjapGWCNp/G2H+tv0TPSuJ2

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1528	0f3d7498ee04bf27d387cc89f2d7ce6f.exe

C:\Users\Admin\AppData\Local\Temp\0f3d7498ee04bf27d387cc89f2d7ce6f.exe
"C:\Users\Admin\AppData\Local\Temp\0f3d7498ee04bf27d387cc89f2d7ce6f.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1528