bd21c00bbf966bcf2291032c62341bad6fc43d13a204e97951667fe6c38d35c7

Analysis

max time kernel
117s
max time network
120s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
28-01-2024 06:42

Target

7c692c8d67db894ad695e1083281e331.exe
Size

23KB
MD5

7c692c8d67db894ad695e1083281e331
SHA1

706eb3f07209f539379db81968ae245c7fb904ad
SHA256

bd21c00bbf966bcf2291032c62341bad6fc43d13a204e97951667fe6c38d35c7
SHA512

1c3fbb990c1cbad9811952e6e8865a1fe4ccdf548727292cbcbe9d1f385e4f27613bd8bdbb444413c90e669ea91911f5cabcbe07db506dcf659a4d9463ba7eff
SSDEEP

384:gi+h9by6A82JnR5oDrFIufg/acDGzH0Q/8ODBWLdbaLa4CwUJuUCSFCJWe8EDEWW:gDnA8W2rF7eaoK/8ODMbaLa4PU48IM

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1740	7c692c8d67db894ad695e1083281e331.exe

C:\Users\Admin\AppData\Local\Temp\7c692c8d67db894ad695e1083281e331.exe
"C:\Users\Admin\AppData\Local\Temp\7c692c8d67db894ad695e1083281e331.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1740