d16dddc1e9ad69c5ef67afd93eb801c74ca5b95ec8b46741786c8c8ec47b1b1d | Triage

Analysis

max time kernel
119s
max time network
123s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
24-05-2024 20:20

Sharing

Report Analysis Logs

General

Target

Uninstall.exe
Size

36KB
MD5

a846e764e1b11edda7b233eed37b60f3
SHA1

7c072ff57e369705cd64801c87c3618951890f53
SHA256

af0d7f1a4388da8050f3d3612513f5e0e190f783179502dc7fd099e1b3db8015
SHA512

b6363ccbe1bf2c9bfdcaa1afc6a9cbe22886abc32107c94dbcd74bd8de4146a466bc2d0bfeb1db1b5f036462cd31653f73e6273ed39ac4bd82a16e1f4c1621b9
SSDEEP

384:4l1fU0XdOGml1ZWyyRnBnZWOh6ohsEeR0B958XCq4:AxdZys9Nh6oC0z55z

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

Uninstall.exe

description pid process

Token: SeRestorePrivilege 2412 Uninstall.exe
Token: SeBackupPrivilege 2412 Uninstall.exe

C:\Users\Admin\AppData\Local\Temp\Uninstall.exe
"C:\Users\Admin\AppData\Local\Temp\Uninstall.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2412

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...