Analysis
- max time kernel
147s - max time network
207s - platform
windows10-2004_x64 - resource
win10v2004-20231215-en - resource tags
- submitted
23/01/2024, 13:08
General
- Target dbgsrv/win32_remote.exe
- Size 622KB
- Sample240123-qdgfrsbda9
- SHA256 6ef226fbf99ce4b32587b488e840fb27dff071d109e50e842810b95988feacc3
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dbgsrv\win32_remote.exe"C:\Users\Admin\AppData\Local\Temp\dbgsrv\win32_remote.exe"1⤵
- Suspicious use of AdjustPrivilegeToken