96fa90e79bed0f1662332b1c3b1440a74e314c8bdecae5e11934377eb6a6f5ec

Analysis

max time kernel
149s
max time network
154s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
23/02/2024, 22:19

Target

a07a36fd1245f4b43ac1194bdae04f79.exe
Size

1.2MB
MD5

a07a36fd1245f4b43ac1194bdae04f79
SHA1

a6863d316d011af130f6846ab405259053f40bd5
SHA256

96fa90e79bed0f1662332b1c3b1440a74e314c8bdecae5e11934377eb6a6f5ec
SHA512

02c644414c72fc43452af8b88b130b877ebbadb060edfadd679cc4a03dbe0ddf9d8d578acc535f253d285cb763241b7c1a356b24a0d9925ad29af6e8dbb1384d
SSDEEP

24576:W8OMaewsAje9rJkQx4tUjS4bQ6t9WnkdwkCIabjKoh9Wj:NOvljeIgjdsk9WnOVCIabjKoh9Wj

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4416	a07a36fd1245f4b43ac1194bdae04f79.exe

C:\Users\Admin\AppData\Local\Temp\a07a36fd1245f4b43ac1194bdae04f79.exe
"C:\Users\Admin\AppData\Local\Temp\a07a36fd1245f4b43ac1194bdae04f79.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4416