9e37bb863752875a685b1dd93f44e9445712f4ba81575753a23fe84ece310ceb

Analysis

max time kernel
148s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20231215-en
resource tags

arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
submitted
08/03/2024, 02:26

Target

9e37bb863752875a685b1dd93f44e9445712f4ba81575753a23fe84ece310ceb.exe
Size

231KB
MD5

bd761cd69fd3ffd9e8c09b1286771eb8
SHA1

eea14237352df590e58b79134dbbdeff33f5d2fc
SHA256

9e37bb863752875a685b1dd93f44e9445712f4ba81575753a23fe84ece310ceb
SHA512

349137a5d466e77277f3cb37f2fe273e2ff07b563142018a7372ffa5ce485d73c00ba06e042d0c56e97312cbc651fb8e78598323c6f3f8b573fbdc2022d4a990
SSDEEP

3072:ZsLpGYaRBM1JPbhpXKsGBD89DDWbaNCfKcULf4bbZOCeOelglSHsXD1xuiupN15f:ipGYawnbv9pDWbECfKnLf4z0N0CJ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4208	9e37bb863752875a685b1dd93f44e9445712f4ba81575753a23fe84ece310ceb.exe

C:\Users\Admin\AppData\Local\Temp\9e37bb863752875a685b1dd93f44e9445712f4ba81575753a23fe84ece310ceb.exe
"C:\Users\Admin\AppData\Local\Temp\9e37bb863752875a685b1dd93f44e9445712f4ba81575753a23fe84ece310ceb.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4208

memory/4208-1-0x0000000074790000-0x0000000074F40000-memory.dmp

Filesize
7.7MB

Download
memory/4208-0-0x00000000009F0000-0x0000000000A30000-memory.dmp

Filesize
256KB

Download
memory/4208-2-0x0000000005470000-0x0000000005480000-memory.dmp

Filesize
64KB

Download
memory/4208-3-0x0000000005340000-0x0000000005346000-memory.dmp

Filesize
24KB

Download
memory/4208-4-0x0000000074790000-0x0000000074F40000-memory.dmp

Filesize
7.7MB

Download
memory/4208-5-0x0000000005470000-0x0000000005480000-memory.dmp

Filesize
64KB

Download