85169609c46d826056b30285140b95a759b51eeacebcef0b084f5671f0ac32ea

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240508-en
resource tags

arch:x64arch:x86image:win7-20240508-enlocale:en-usos:windows7-x64system
submitted
01/06/2024, 09:27

Target

2024-06-01_218f4ee28533e21cadad6378423c0c4d_snatch.exe
Size

1.9MB
MD5

218f4ee28533e21cadad6378423c0c4d
SHA1

9c13b76865153123e8d7f18b8a24d95d4c14b53f
SHA256

85169609c46d826056b30285140b95a759b51eeacebcef0b084f5671f0ac32ea
SHA512

6909133f15a6e76e1f3186c46880a7e5221ca078ed7b8465356e416888805e0710b8db88a51c69e0b72564b8c25768da3dec3429e791f13329777c136ad03a7c
SSDEEP

24576:+0sY9baPCCHwDorUOymEGWNf+QCgcIYZX8EQtj/975kR:+0LxaPCcwcrUOyfGWNfCn+Bz975Y

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2036	2024-06-01_218f4ee28533e21cadad6378423c0c4d_snatch.exe

C:\Users\Admin\AppData\Local\Temp\2024-06-01_218f4ee28533e21cadad6378423c0c4d_snatch.exe
"C:\Users\Admin\AppData\Local\Temp\2024-06-01_218f4ee28533e21cadad6378423c0c4d_snatch.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2036