36577ccb3dc8ff16db9a927d6bed2803f20bc1bb4a10e3fdf2c6259d8757a2ce

Analysis

max time kernel
150s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240611-en
resource tags

arch:x64arch:x86image:win10v2004-20240611-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2024 03:22

Target

36577ccb3dc8ff16db9a927d6bed2803f20bc1bb4a10e3fdf2c6259d8757a2ce.exe
Size

1.6MB
MD5

3ab284a4291848cca02ce7fc1cc9637a
SHA1

4216d7758218eb8b3b167f80ee81a0c85c1a30e1
SHA256

36577ccb3dc8ff16db9a927d6bed2803f20bc1bb4a10e3fdf2c6259d8757a2ce
SHA512

ba131b8b7b99e8786d45c0a3f7e0b7eff8893781e28d2506a5ab4bac97aff3eac577df1d948bedd40a0a2ee85c90063e6af9d47a29b390cfb2572e4ec0e788f1
SSDEEP

49152:IpGG3YoVpol8rOEq+LhhJr7uIG9EC9E+B:DKYaOEq+NhnG939

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1208	36577ccb3dc8ff16db9a927d6bed2803f20bc1bb4a10e3fdf2c6259d8757a2ce.exe

C:\Users\Admin\AppData\Local\Temp\36577ccb3dc8ff16db9a927d6bed2803f20bc1bb4a10e3fdf2c6259d8757a2ce.exe
"C:\Users\Admin\AppData\Local\Temp\36577ccb3dc8ff16db9a927d6bed2803f20bc1bb4a10e3fdf2c6259d8757a2ce.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1208