0d4e910847a8da89c1a61e75ddd8db232083e735486178457c547e6a3958dcc1

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20240426-en
resource tags

arch:x64arch:x86image:win10v2004-20240426-enlocale:en-usos:windows10-2004-x64system
submitted
26/05/2024, 10:21

Target
BDBugReportx64.exe
Size 244KB
Sample240526-md41aaff62
SHA256 54be9c8057c6736b188398cdb51faa406223667f52b06e2b06f1430a6052ffef
MD5 575d7d14b7b1bec7b636b0dc3f04dc94
SHA1 a7587536112c990fbdf7c37bfadf9cf42995b195
SHA512 58518521ea75412e6bc6aed8282d7f87f4fbd7a331c7ef8326d7962f9c0a691cf69b6a3a6f0f65c2c4d7cb063e6eb4ad3d0b372fac753012c5d5d9d1b72d63f4
SSDEEP 6144:1dpgIn1Em9TQa7ThngtgEeNNGz5JbK4PK:XpgIn1lVQaC5Jbc
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1552	BDBugReportx64.exe

C:\Users\Admin\AppData\Local\Temp\BDBugReportx64.exe
"C:\Users\Admin\AppData\Local\Temp\BDBugReportx64.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1552