690422ca3b22e795694214a88c602b105c07d56630436dcf09905bfdbaa356d0

Analysis

max time kernel
176s
max time network
189s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/03/2024, 22:13

Target

690422ca3b22e795694214a88c602b105c07d56630436dcf09905bfdbaa356d0.exe
Size

1.6MB
MD5

31d2b9895dc0b9111bc3d489ce068c32
SHA1

2f619da687602d30903a82b992d869be3cd6c940
SHA256

690422ca3b22e795694214a88c602b105c07d56630436dcf09905bfdbaa356d0
SHA512

62e8e0b05e5de907dcfe37d72f7c2fb9df5704da2fdcf4e9d866ec0d67eec10132fd83dae4a0385fdb29f1955dbd032676f6e043f5f0e666f62a6d79c142dddc
SSDEEP

24576:fvNhbPFpJ3Ww87mLezrY98lnXbzH6iX14gTuUQvKipVMe7P:tdFX3WwovrnnXCqruBBpbP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	3108	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	3108	AUDIODG.EXE

Suspicious use of SetWindowsHookEx 3 IoCs

C:\Users\Admin\AppData\Local\Temp\690422ca3b22e795694214a88c602b105c07d56630436dcf09905bfdbaa356d0.exe
"C:\Users\Admin\AppData\Local\Temp\690422ca3b22e795694214a88c602b105c07d56630436dcf09905bfdbaa356d0.exe"
1⤵
- Suspicious use of SetWindowsHookEx
PID:1452

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x2e8 0x4bc
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3108