Analysis
-
max time kernel
70s -
max time network
95s -
platform
windows11-21h2_x64 -
resource
win11-20240709-en -
resource tags
-
submitted
14-07-2024 18:46
General
-
Target
IDA Pro 8.3 (x86, x86_64)/dbgsrv/win64_remote64.exe
-
Size
806KB
-
MD5
2a70579bd02ac10a52fcd0fdf40af20f
-
SHA1
898e43cfb0980149dbef2d81037d25d2fcbefb39
-
SHA256
a4087d756c3aa18e6f7147be37edbdcd6a298867282be608f0a110c40cde5de3
-
SHA512
f428134f02c2e650ca9c3549c67b724b7c7748fd6e866218b152d9444477384eb6b19fdbbbfd99bab48b18b1020071a6931069b46d8434b86cd76073f917ef09
-
SSDEEP
12288:/5jeZoDxGz9d4lfR5akU5ikD5MlW+FpO/bXI4eEWLvzdGUyYLm:/FeZQxGYnkkHkD5MlpyXI4eEWLvRGUW
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\dbgsrv\win64_remote64.exe"C:\Users\Admin\AppData\Local\Temp\IDA Pro 8.3 (x86, x86_64)\dbgsrv\win64_remote64.exe"1⤵
- Suspicious use of AdjustPrivilegeToken