476c86ca36a205301a5e568dd2ec665c45df8d68b61b25d87924cac45187bcf2

Analysis

max time kernel
152s
max time network
164s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
26-03-2024 21:13

Target

e01bd35795f9b956615bcc3716b8eb2e.exe
Size

1.4MB
MD5

e01bd35795f9b956615bcc3716b8eb2e
SHA1

17491c09109e6d55c89dc2660e0a3f1c4e816141
SHA256

476c86ca36a205301a5e568dd2ec665c45df8d68b61b25d87924cac45187bcf2
SHA512

d1244d9226e11b8f0a74ecb9f115ce6ab31b162c4bec7fe81f2121af950619af2ab62ae780f0d34bdfb909a9c27433c664a8a3d66b9f92a28ec775ad002b2713
SSDEEP

24576:W8Or0sDORL1D5mSFA7wnNTBsM84pJ9rJkQx4tUjS4bQ6t9Wnkd:NOwsDOZ1dWwnNTBsM84pJIgjdsk9WnO

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2336	e01bd35795f9b956615bcc3716b8eb2e.exe

C:\Users\Admin\AppData\Local\Temp\e01bd35795f9b956615bcc3716b8eb2e.exe
"C:\Users\Admin\AppData\Local\Temp\e01bd35795f9b956615bcc3716b8eb2e.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2336