c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240611-en
resource tags

arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system
submitted
25/06/2024, 14:59

Target

c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737.exe
Size

199KB
MD5

a78927d63f2b838a9fd6da5f0fe7ce60
SHA1

27c7e3a94895d5ebbcbaaf66fe5fb096bb463ac1
SHA256

c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737
SHA512

8335ed991edf7ca3e17bca27de1c305d9fa6e1df64e343d8fbc157d304dab3ded73c5079d7d9b9b50608dbf666b92e5bcaf2e4ef2fbc720d07f3c4f3a218351c
SSDEEP

6144:5Rb+D4Jxkk6vBs/TpW1X4kxuqimeLqoCb:5lgkUBs/TpeX4pqiFqoq

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2456	c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737.exe

C:\Users\Admin\AppData\Local\Temp\c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737.exe
"C:\Users\Admin\AppData\Local\Temp\c29dcbab3e6b39603a4aa6e944d81bb79695ec6d9bf61be7c3801b2de38b1737.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2456