e76789a4f5bd53bb6e8129679050aa7584aca29f4bdfd0ddf328bfbcc1587505

Analysis

max time kernel
161s
max time network
179s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 02:43

Target

eclgn222.exe
Size

69KB
MD5

7dde85fb9e1645dfac179756497efc76
SHA1

921766dca25814dab38603aeec1275c1d0708e72
SHA256

1151b9d5a74343f260d5ad7ba1591168e5ef351d002c861833fd3ae92b24797e
SHA512

ec1f1c0b70bac012c59da11c75860d4ccd42d4411f5e69a46d8f3146177da185545d7abd6ed8d5c40c3af70b67a3fc91df3463038d0223336e7f13d6879e0830
SSDEEP

1536:/chlbKgSYQitxqt54Mu14sz/KjixAqS1cF/:EzbK1t5RkKjimqS+

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	4668	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4668	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\eclgn222.exe
"C:\Users\Admin\AppData\Local\Temp\eclgn222.exe"
1⤵
PID:3256

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4c4 0x2d4
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4668

memory/3256-0-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-1-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-2-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-3-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-4-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-5-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-6-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-7-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-8-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-9-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-10-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-11-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-12-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download
memory/3256-13-0x0000000000400000-0x0000000000439000-memory.dmp

Filesize
228KB

Download