228fc6b3e16fbac9a26dbb7d77685533bf561bba20f25d3f2020c6267a2d1f01

Analysis

max time kernel
117s
max time network
121s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
14/01/2024, 18:45

Target

5b9453a9e41248b6c6829af49d9a7f7a.exe
Size

289KB
MD5

5b9453a9e41248b6c6829af49d9a7f7a
SHA1

5fa747b276759a556cdf82d65702d3f9c43bd67e
SHA256

228fc6b3e16fbac9a26dbb7d77685533bf561bba20f25d3f2020c6267a2d1f01
SHA512

fde20b2f406e4c1bcac7c10cd3ea48d0e4300911a0c90d517ecc11855a7a78375e05e10450d1b41060cdb8657175c689786ac1b81fe47fd90e0048a3d2560d5f
SSDEEP

6144:5Ui0aRHUY1vjapGWCNp/G2H+tv0TBZvOKuJc:ei0aRHUAjapGWCNp/G2H+tv0TPPuJc

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3032	5b9453a9e41248b6c6829af49d9a7f7a.exe

C:\Users\Admin\AppData\Local\Temp\5b9453a9e41248b6c6829af49d9a7f7a.exe
"C:\Users\Admin\AppData\Local\Temp\5b9453a9e41248b6c6829af49d9a7f7a.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3032