dc12b54de682c2a8c2d3fd6a55f18bddd89fd07712e3ff6d8b7708ec1aebae5d

Analysis

max time kernel
143s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
12/01/2024, 03:12

Target

55544531420f82af9644d6ace1f61331.exe
Size

9KB
MD5

55544531420f82af9644d6ace1f61331
SHA1

a30bf396f3490b1bad029b1c37c7b3b672770aae
SHA256

dc12b54de682c2a8c2d3fd6a55f18bddd89fd07712e3ff6d8b7708ec1aebae5d
SHA512

6b6de861d7fa7e224c191529bd69679576b1c7aa103b77e73d1eef993f96e849a64f2d2caf4d8a45f657638d12ac6be0d8349ced91438856b2b58fcaa8425e38
SSDEEP

192:SBksuPzHNQAePeMZZ3193Vnjdwqz613RT3:VHdePeMfFnhwq8B

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	492	55544531420f82af9644d6ace1f61331.exe

C:\Users\Admin\AppData\Local\Temp\55544531420f82af9644d6ace1f61331.exe
"C:\Users\Admin\AppData\Local\Temp\55544531420f82af9644d6ace1f61331.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:492

memory/492-0-0x0000000000700000-0x0000000000708000-memory.dmp

Filesize
32KB

Download
memory/492-1-0x0000000002780000-0x0000000002792000-memory.dmp

Filesize
72KB

Download
memory/492-2-0x00007FFDB1C10000-0x00007FFDB26D1000-memory.dmp

Filesize
10.8MB

Download
memory/492-3-0x00000000028F0000-0x000000000292C000-memory.dmp

Filesize
240KB

Download
memory/492-4-0x000000001B510000-0x000000001B520000-memory.dmp

Filesize
64KB

Download
memory/492-5-0x00007FFDB1C10000-0x00007FFDB26D1000-memory.dmp

Filesize
10.8MB

Download
memory/492-6-0x00007FFDB1C10000-0x00007FFDB26D1000-memory.dmp

Filesize
10.8MB

Download