72360dd610ce0039db16f06f0d4ef8082d8c931d208fb9b0a8cac775f8ce9fdd

Analysis

max time kernel
122s
max time network
127s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
29-05-2024 12:50

Target

2024-05-29_f31cfed4e4321a245c9acbde82f54d29_snatch.exe
Size

8.5MB
MD5

f31cfed4e4321a245c9acbde82f54d29
SHA1

66f6595478d53ce65b08a08b0190636b6edb8b5c
SHA256

72360dd610ce0039db16f06f0d4ef8082d8c931d208fb9b0a8cac775f8ce9fdd
SHA512

3d4c96797655f64d0f4eca3943a9c041f99b1c1b8840315630da0f3cb79900ae419cef9b99055acc9138ceee5524cad26e16365eeb1a937fac420b3774c72492
SSDEEP

98304:639TaBANQIL3/YY5Ez0CoMs8xR7gtq4wjXiXP2r/nVhYV:6dNQEawCnxx7/n/Y

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1984	2024-05-29_f31cfed4e4321a245c9acbde82f54d29_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2024-05-29_f31cfed4e4321a245c9acbde82f54d29_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2024-05-29_f31cfed4e4321a245c9acbde82f54d29_snatch.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1984