122682f111f48b8a229e2aeabdb608b6a854237b84c4a41c5bae8089f3a55fc9

Analysis

max time kernel
122s
max time network
129s
platform
windows7_x64
resource
win7-20231215-en
resource tags

arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
submitted
04-02-2024 11:44

Target

8f11f9df0a09cd3f8a1aa514dd9ca5a6.exe
Size

289KB
MD5

8f11f9df0a09cd3f8a1aa514dd9ca5a6
SHA1

2c70c693a82234632a2868cbc9958bd7f2113523
SHA256

122682f111f48b8a229e2aeabdb608b6a854237b84c4a41c5bae8089f3a55fc9
SHA512

3ddeaccc3e6347348afb02f6bb9e55fb2a250916fb7920a1016f4749daaa9a88979b8a4acfa79b0fe54efb2ca348e030d76107b327268037d48630c4e096c81f
SSDEEP

6144:KUi0aRHUY1vjapGWCNp/G2H+tv0TBZvGKuJHD:9i0aRHUAjapGWCNp/G2H+tv0TPnuJHD

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2808	8f11f9df0a09cd3f8a1aa514dd9ca5a6.exe

C:\Users\Admin\AppData\Local\Temp\8f11f9df0a09cd3f8a1aa514dd9ca5a6.exe
"C:\Users\Admin\AppData\Local\Temp\8f11f9df0a09cd3f8a1aa514dd9ca5a6.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2808