20a441458a4fcf2e29a2785d20340d4c0509f5a8b9e5a5a2bc692ea76411e337

Analysis

max time kernel
121s
max time network
122s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
04/01/2024, 06:13

Target

4019ef67f6270be5b6103ee6f53b0fb4.exe
Size

345KB
MD5

4019ef67f6270be5b6103ee6f53b0fb4
SHA1

7f76aa25b1e364cb67c90bf79d338feceaae1e8e
SHA256

20a441458a4fcf2e29a2785d20340d4c0509f5a8b9e5a5a2bc692ea76411e337
SHA512

2385db079ce18a623be651cb0e4dadaa2eb3124b06b5f1000a2b5532d0066cd031c155708fdf153a27070b055ef5c304178c8ae3b0111f9b7479e957698091be
SSDEEP

6144:9NZd31PuSc5Y52Dt3VHhI1CztOz+PTdi2ltjv//E87YzTBIxEwMTR:9Td31PuIqt3gCEzoR7YzTK2

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2136	4019ef67f6270be5b6103ee6f53b0fb4.exe

C:\Users\Admin\AppData\Local\Temp\4019ef67f6270be5b6103ee6f53b0fb4.exe
"C:\Users\Admin\AppData\Local\Temp\4019ef67f6270be5b6103ee6f53b0fb4.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2136