d49ac298eb6fd619e9e209454762e4b73c76d9def3e47c6587288ee1c5490674

Resubmissions

28/02/2024, 07:11

28/02/2024, 05:37

max time kernel
200s
max time network
262s
platform
windows7_x64
resource
win7-20240215-en
resource tags

arch:x64arch:x86image:win7-20240215-enlocale:en-usos:windows7-x64system
submitted
28/02/2024, 05:37

Target

DigitalPulseService.exe
Size

10.0MB
MD5

06780f1c48a54677b373d4dcdbc8bde6
SHA1

9152a43c9e4bd6d3e038a2d46c9ff36afbdb72e8
SHA256

d49ac298eb6fd619e9e209454762e4b73c76d9def3e47c6587288ee1c5490674
SHA512

2304063b047c352afd72684dd2f05ed25539722d09c03d64efa35425f9bb8812334cfc2b318b58a9e84bda410d1a8276f9b47e62e12be2fc9bb348a41e814084
SSDEEP

98304:XE9lYvPbyQfmbTvItVSLlSE2RDdPXf4FpEItwokIGTaw7SvYrL:XEYvPbzG/23PXf4FpEIt+9L

Score

1^/10

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	2208	DigitalPulseService.exe
Token: 33	1736	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1736	AUDIODG.EXE
Token: 33	1736	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1736	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\DigitalPulseService.exe
"C:\Users\Admin\AppData\Local\Temp\DigitalPulseService.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2208

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4dc
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1736