3839df9ae080d8ab532253eb4c9737b1e34bbf4139cee94146051707ad7c79c9

Analysis

max time kernel
206s
max time network
206s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 04:10

Target

279a1693863ff21f8313a2245f5238b2.exe
Size

45KB
MD5

279a1693863ff21f8313a2245f5238b2
SHA1

c9f65a4820367d4ef8d33f81bc7a5d9825632c28
SHA256

3839df9ae080d8ab532253eb4c9737b1e34bbf4139cee94146051707ad7c79c9
SHA512

8e0740787c705951619c15133b5d0ed621b47c00eadfb7830e5bb0ea367dc38bdbb4f6e6ee3a370ce0ce4646d69ae60cc99dc7349091a1a98e3655a81e8669ff
SSDEEP

768:fWKUPJa6iUbQsy7PsprPQy7WWWzFiNOOl0M1Cx1HEHCDwBLpZTPCUvQD:+JJa6iUbQsc0QOKzFieMMbz8t9zQD

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSystemtimePrivilege	2172	279a1693863ff21f8313a2245f5238b2.exe

C:\Users\Admin\AppData\Local\Temp\279a1693863ff21f8313a2245f5238b2.exe
"C:\Users\Admin\AppData\Local\Temp\279a1693863ff21f8313a2245f5238b2.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2172