10391ef2f4b7a24d4ca7c47d668e0f989c16fc9279f315e6c7faae17ead89a27

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
31-12-2023 02:04

Target

23cd12c0cc84b91546d0708a1a3e7469.exe
Size

289KB
MD5

23cd12c0cc84b91546d0708a1a3e7469
SHA1

ac65c35a7dd40ccd41397f16e31998c4472a8ec7
SHA256

10391ef2f4b7a24d4ca7c47d668e0f989c16fc9279f315e6c7faae17ead89a27
SHA512

efe0ad4c82c603b70bffcf3e8d834d6af6d9bf86a418c4bdf102510a9f81de03a3f39a05cf5d985148648955b533eb97f63f7b0596e898fc6956c4097e85f24c
SSDEEP

6144:9Ui0aRHUY1vjapGWCNp/G2H+tv0TBZvbKuJ0:ii0aRHUAjapGWCNp/G2H+tv0TPuuJ0

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1940	23cd12c0cc84b91546d0708a1a3e7469.exe

C:\Users\Admin\AppData\Local\Temp\23cd12c0cc84b91546d0708a1a3e7469.exe
"C:\Users\Admin\AppData\Local\Temp\23cd12c0cc84b91546d0708a1a3e7469.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1940