dc1d2aa6f317195b78792812991a79dd257c628885d9436920570c0d9a2823fd

Analysis

max time kernel
149s
max time network
126s
platform
windows10-2004_x64
resource
win10v2004-20240419-en
resource tags

arch:x64arch:x86image:win10v2004-20240419-enlocale:en-usos:windows10-2004-x64system
submitted
08/05/2024, 01:21

Target
dc1d2aa6f317195b78792812991a79dd257c628885d9436920570c0d9a2823fd.exe
Size 735KB
Sample240508-bqqgwade57
SHA256 dc1d2aa6f317195b78792812991a79dd257c628885d9436920570c0d9a2823fd
MD5 a3c175fb0ee017e7c2118c6763bcb40b
SHA1 b2a2047b2ff946db0271b5bae4801ef820b936ef
SHA512 1e9f4fd031ad49f581a492380518cc8095d4977ebd800b01d9fdce4bd2ea6bc6908541cb74e4bb78c840788fcafd9e0f8fecbd140b3c301318016a5179e41876
SSDEEP 12288:fLXxuvoUKU31EvoUKD3PFus9HVAvoUKCAG:TOFKU38FKD3dTDKFKCAG
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4420	dc1d2aa6f317195b78792812991a79dd257c628885d9436920570c0d9a2823fd.exe

C:\Users\Admin\AppData\Local\Temp\dc1d2aa6f317195b78792812991a79dd257c628885d9436920570c0d9a2823fd.exe
"C:\Users\Admin\AppData\Local\Temp\dc1d2aa6f317195b78792812991a79dd257c628885d9436920570c0d9a2823fd.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4420