Analysis
-
max time kernel
140s -
max time network
123s -
platform
windows10-2004_x64 -
resource
win10v2004-20240412-en -
resource tags
-
submitted
25-04-2024 07:52
General
-
Target
win32_remote.exe
-
Size
704KB
-
MD5
2783a76f46f07b45dcc4514bd67daeb4
-
SHA1
a2ec57d564f9b29cc9798ddad730ecda0af4fcc0
-
SHA256
9ca85bbfed42b252002390fe9c5dbbfbe2e76c6e69f681204dd1d403b8f1ce2d
-
SHA512
00c25cff3239d5b7dc091340468228911eeb3037024feb0029eda2d9e4632dd5c603936d084ee47da0582e10d19e7e697574682fcb3e225c932be693282ebbc2
-
SSDEEP
12288:I0M5551VeifM4D9ohl4wjiVzRuWFpSte+cgKlT701zbR/zLsi5VmBiJ8RLYTlIP:vEvJHzRiFcgwf6FsiU+8RLYTCPPdoJ
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\win32_remote.exe"C:\Users\Admin\AppData\Local\Temp\win32_remote.exe"1⤵
- Suspicious use of AdjustPrivilegeToken