2e1e3f75fdb08c26e41d7870db6ffea5b89b39100899fe609b3c1d0d018c87d3

Resubmissions

14/06/2024, 14:27

14/06/2024, 14:23

17/04/2024, 09:42

max time kernel
121s
max time network
125s
platform
windows7_x64
resource
win7-20231129-en
resource tags

arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
submitted
17/04/2024, 09:42

Target
d_win_x32_ru.exe
Size 18.1MB
Sample240417-lpnl1abc26
SHA256 567606dabaa4e594646adfa6eabc1f96aad60c8bf6bee566a26c5677217f76d7
MD5 50878f845e9318a0ef03909ca8706d3b
SHA1 de802f84a328752a2b142c2773a000a288974f88
SHA512 3346b3d6c6bc7617caed4b230f37204fd76cea8dcd70d9638375280ed3edfb9ce932f444c0f6886b881637762feb5b229d99061db36cbd4b227c70b657da3c00
SSDEEP 196608:+DbyRgqvlNpp46To5LJmh64xXgJZjM/Wi:+Dh44dmI4xXgJZwu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	400	d_win_x32_ru.exe

C:\Users\Admin\AppData\Local\Temp\d_win_x32_ru.exe
"C:\Users\Admin\AppData\Local\Temp\d_win_x32_ru.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:400