f17dcec6902211fd19eaccde31fba53ba7704d43797366911d665478a0af1c5e

Analysis

max time kernel
122s
max time network
124s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
02/06/2024, 07:20

Target

f17dcec6902211fd19eaccde31fba53ba7704d43797366911d665478a0af1c5e.exe
Size

33.5MB
MD5

ee771e34a5d2db5360db975b4c4d2195
SHA1

3285dd1d397e83ffcb4512877c731731391c1e63
SHA256

f17dcec6902211fd19eaccde31fba53ba7704d43797366911d665478a0af1c5e
SHA512

b1050b43e8815b19c45da6f63b880eb500d9d325e4642f155551966472b60e324e077cb5fb360c6d60317c386a6b4055cdd4862b9ccdfbc605f114944fbba522
SSDEEP

196608:PGlv9SOH+vpiTzGNmXq36VxK7ejB+zBxMYO4m7:PupHypimN0VxK7csQPn7

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1228	f17dcec6902211fd19eaccde31fba53ba7704d43797366911d665478a0af1c5e.exe

C:\Users\Admin\AppData\Local\Temp\f17dcec6902211fd19eaccde31fba53ba7704d43797366911d665478a0af1c5e.exe
"C:\Users\Admin\AppData\Local\Temp\f17dcec6902211fd19eaccde31fba53ba7704d43797366911d665478a0af1c5e.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1228