068b66cca7797db0b318442d3ef4918bdfcaa89d185816530aefe647b4519062

Analysis

max time kernel
165s
max time network
181s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 02:05

Target

23dad1a1bcf458035eb29fb4d1f9a058.exe
Size

289KB
MD5

23dad1a1bcf458035eb29fb4d1f9a058
SHA1

2efdb846eef146b4fbb88359bbee06249af18ea4
SHA256

068b66cca7797db0b318442d3ef4918bdfcaa89d185816530aefe647b4519062
SHA512

4d32f54f2a87b75b907ed43275a75df22633e1b5cdffb03c6bc21d9723d307a2480fe3ea140b3f3bdac647740ca77ba9acf29c2dba6f9326af33657b19cfee0d
SSDEEP

6144:8Vgzu7KHXjV8DyJCvok0Tx8WRtvYTBwmeKSupZ:egzu7KHX+DyJCvok+x8WRtvYT+6SupZ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2344	23dad1a1bcf458035eb29fb4d1f9a058.exe

C:\Users\Admin\AppData\Local\Temp\23dad1a1bcf458035eb29fb4d1f9a058.exe
"C:\Users\Admin\AppData\Local\Temp\23dad1a1bcf458035eb29fb4d1f9a058.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2344