bbadd95c326ad49b0569ffc1961b5bd37629bf206e66feafd1218da98ff87ee6

Analysis

max time kernel
119s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
18/04/2024, 09:46

Target

c8a9151b7e9179a9bca8545490a0d4fc.exe
Size

38.6MB
MD5

c8a9151b7e9179a9bca8545490a0d4fc
SHA1

de6fb7e758832910f995caeff1d05b03b38d4176
SHA256

bbadd95c326ad49b0569ffc1961b5bd37629bf206e66feafd1218da98ff87ee6
SHA512

7ecda7f6dea06963970620cd4606549e997835b9eb440b4897933e23b0fa595634904a7e5faa49ab1293b2270ea949371da159478fd8b176f53f4e45e68e1b62
SSDEEP

393216:eAj6IhqyGt76zLXzcPquzdygKE9tBjUDgSmmEX8dANlXhR2loiwL/IsK6EMWP9:e+hqysOD6IM7jUcwEMaP72lggcEZ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	1404	c8a9151b7e9179a9bca8545490a0d4fc.exe

C:\Users\Admin\AppData\Local\Temp\c8a9151b7e9179a9bca8545490a0d4fc.exe
"C:\Users\Admin\AppData\Local\Temp\c8a9151b7e9179a9bca8545490a0d4fc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1404