159698b745ca81e60dfae6cab1d31160167593b7e38fcb79415eccf5f2e005a9

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
31/12/2023, 04:40

Target

288e993bb9301d6431f244fed599516b.exe
Size

345KB
MD5

288e993bb9301d6431f244fed599516b
SHA1

b2cd63789020f248bad58d7842a548d2456414b0
SHA256

159698b745ca81e60dfae6cab1d31160167593b7e38fcb79415eccf5f2e005a9
SHA512

1be5206b126e8bcd5ae2f78cc5de73d28a5a3288a5e3c6ebc38617344a2fb758cb8b0e033db5bd4330863ecef99c50489f4cf8c0c6cd45fd574005fc227e971b
SSDEEP

6144:ENZd31PuSc5Y52Dt3VHhI1CztOz+PTdi2ltjv//E87YzTBIxEwST2:ETd31PuIqt3gCEzoR7YzTKH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3772	288e993bb9301d6431f244fed599516b.exe

C:\Users\Admin\AppData\Local\Temp\288e993bb9301d6431f244fed599516b.exe
"C:\Users\Admin\AppData\Local\Temp\288e993bb9301d6431f244fed599516b.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3772