20aaee1ac8fd694ad7dd941432676adb62160319b683636499541882031ff13e

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
18/03/2024, 16:20

Target

d3f526c8767e900d243200bba821e3bf.exe
Size

171KB
MD5

d3f526c8767e900d243200bba821e3bf
SHA1

a4941f9446d9f134e5ecec8f6c5b56d80e645e2c
SHA256

20aaee1ac8fd694ad7dd941432676adb62160319b683636499541882031ff13e
SHA512

b312518645b4ee1290aba14ece017d19fa6213dbba86ce8f7c7e03ca2d13131b2521c87602f521cbab302722e46e89ac981f713a83f7ad2ed305de51167a327a
SSDEEP

3072:bB4FJDDTw6EVSp0ydsKA/QcbM7f5CGg4I7DA5a/c2AHJyWza9q4iuOneRLaZmqQV:bBqDDs6asU7DA5F2Cyt9DGeRLaZmqsDJ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeSecurityPrivilege	2360	d3f526c8767e900d243200bba821e3bf.exe

C:\Users\Admin\AppData\Local\Temp\d3f526c8767e900d243200bba821e3bf.exe
"C:\Users\Admin\AppData\Local\Temp\d3f526c8767e900d243200bba821e3bf.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2360