c9c660914e4d58a6e0dd460afae6e4af288c9f191ad8592dc95db5a69868fc70

max time kernel
94s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20240508-en
resource tags

arch:x64arch:x86image:win10v2004-20240508-enlocale:en-usos:windows10-2004-x64system
submitted
11-05-2024 13:06

Sharing

Target

Loader.exe
Size

347KB
MD5

1cb742cb95699d994e1cc6810c6f7642
SHA1

103ea603322859742a3e51c5e517a927b9dcd40c
SHA256

c9c660914e4d58a6e0dd460afae6e4af288c9f191ad8592dc95db5a69868fc70
SHA512

79f9a70232b3470ef9386d9b3d987b5370d0562959315d8239509000a1aa9274b13cecc4c6c871cd4d258a0cd19d30574e3280edd54fb108b6ffca7d8c7e4795
SSDEEP

6144:RrwFDD0tZzmf7GxMLEYaEzE2d9JK5/J1pZKM35QM6KkfiruhbOuzB:Rg07e7seE2dK71rKu5Q6kfirIbOuF

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

Loader.exe

description	pid	Process
Token: SeDebugPrivilege	2100	Loader.exe

C:\Users\Admin\AppData\Local\Temp\Loader.exe
"C:\Users\Admin\AppData\Local\Temp\Loader.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2100

memory/2100-1-0x00007FF917AA3000-0x00007FF917AA5000-memory.dmp

Filesize
8KB

Download
memory/2100-0-0x0000000000090000-0x00000000000EE000-memory.dmp

Filesize
376KB

Download
memory/2100-2-0x00007FF917AA0000-0x00007FF918561000-memory.dmp

Filesize
10.8MB

Download
memory/2100-3-0x00007FF917AA0000-0x00007FF918561000-memory.dmp

Filesize
10.8MB

Download
memory/2100-5-0x00007FF917AA0000-0x00007FF918561000-memory.dmp

Filesize
10.8MB

Download