047168bfd6a3e6ac007b9426b38746160bf669819296000372184b45b5cb7174

Analysis

max time kernel
118s
max time network
123s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
01/01/2024, 09:25

Target

3c7de3e3b07987d5f2fa7461df364a36.exe
Size

289KB
MD5

3c7de3e3b07987d5f2fa7461df364a36
SHA1

4ad7cfe4acebe42180a69ed7885bd7e98ab1b479
SHA256

047168bfd6a3e6ac007b9426b38746160bf669819296000372184b45b5cb7174
SHA512

60c9d130ba2442d1981cd7d3e37aee792142c312b970169be622d8534c6d802ac59fdd085d3a88123ac9a207533ccd5b6b25a1ea28104e6af7c007c99718d237
SSDEEP

6144:hVgzu7KHXjV8DyJCvok0Tx8WRtvYTBwmcKSb9:fgzu7KHX+DyJCvok+x8WRtvYT+cSJ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2268	3c7de3e3b07987d5f2fa7461df364a36.exe

C:\Users\Admin\AppData\Local\Temp\3c7de3e3b07987d5f2fa7461df364a36.exe
"C:\Users\Admin\AppData\Local\Temp\3c7de3e3b07987d5f2fa7461df364a36.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2268