06e14d9fcd977efa7cff4067f53861fee7d6f4842b4abab4c29610db98538006

Analysis

max time kernel
115s
max time network
149s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
27/02/2024, 17:03

Target
a9b251bfee50e404928fc7353acb8cb8.exe
Size 345KB
Sample240227-vkzyxaef37
SHA256 06e14d9fcd977efa7cff4067f53861fee7d6f4842b4abab4c29610db98538006
MD5 a9b251bfee50e404928fc7353acb8cb8
SHA1 8dbc7ff97b120a75d3055de43b1ada4975039827
SHA512 37baedc2ad5d75c3639e62e2c99a49d2420708727243c9c202d2394e6f7875d6cf2e0aff31306f10bcd6f266a0baf5485869fbe16fe16efe779625dffbf1dfd5
SSDEEP 6144:NNZd31PuSc5Y52Dt3VHhI1CztOz+PTdi2ltjv//E87YzTBIxEwcT7:NTd31PuIqt3gCEzoR7YzTKQ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5056	a9b251bfee50e404928fc7353acb8cb8.exe

C:\Users\Admin\AppData\Local\Temp\a9b251bfee50e404928fc7353acb8cb8.exe
"C:\Users\Admin\AppData\Local\Temp\a9b251bfee50e404928fc7353acb8cb8.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5056