214606348c4eb2b488bd296b0bb3af5348a45ea133362547e928128835027751

Analysis

max time kernel
122s
max time network
125s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
27-01-2024 04:40

Target

794cc5b7802e6d449f5ce1d8e4dafd84.exe
Size

289KB
MD5

794cc5b7802e6d449f5ce1d8e4dafd84
SHA1

34151009ce2b7fd0cca9b47ced7d7e8eb5b630bb
SHA256

214606348c4eb2b488bd296b0bb3af5348a45ea133362547e928128835027751
SHA512

b4f022ee5e5c65147ca9076e1d9991a777a34db62400466d91502ec57e96f8714c97808fe0aee737932899be109925586e07248d3d32abbca357bf7a3e81e2a5
SSDEEP

6144:4Ui0aRHUY1vjapGWCNp/G2H+tv0TBZvfKuJP:Ti0aRHUAjapGWCNp/G2H+tv0TP6uJP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1652	794cc5b7802e6d449f5ce1d8e4dafd84.exe

C:\Users\Admin\AppData\Local\Temp\794cc5b7802e6d449f5ce1d8e4dafd84.exe
"C:\Users\Admin\AppData\Local\Temp\794cc5b7802e6d449f5ce1d8e4dafd84.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1652