Analysis
-
max time kernel
86s -
max time network
196s -
platform
windows10-2004_x64 -
resource
win10v2004-20231215-en -
resource tags
-
submitted
23-01-2024 13:08
General
-
Target
dbgsrv/win64_remote64.exe
-
Size
776KB
-
MD5
0b261568f21b90011e10393de8d1c5a9
-
SHA1
b30a4beee8d692fcc280e4fb0b9b6e509134dc55
-
SHA256
5cdfc74c5fc05a68620176e18900e5f05234608ed19e0238c7999824c5f8aac2
-
SHA512
0085de6964fe57dc8cb03be732b668e3a993e66c002ff871f567146c484a5debad29d4619313e46129cbd6e3744c5a9fe6d04579f5c4efd925a5340c361c5467
-
SSDEEP
12288:JkYK+J7Llz8DrNrILNrxWPSsUfbc4F6P9PzTJpx3OcAr:JkW9L2vNkrxWPSsn4F6pzTV
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\dbgsrv\win64_remote64.exe"C:\Users\Admin\AppData\Local\Temp\dbgsrv\win64_remote64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken