bc63d4bcd55e3abd6e8a983cc3737fd3506ae8278cf4cb9ece6dfbf15d8df05b

Analysis

max time kernel
149s
max time network
150s
platform
windows10-2004_x64
resource
win10v2004-20240709-en
resource tags

arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
submitted
22/07/2024, 17:08

Target

bc63d4bcd55e3abd6e8a983cc3737fd3506ae8278cf4cb9ece6dfbf15d8df05b.dll
Size

1.8MB
MD5

77e040fd0c12d6b7bccfd4df71a016c1
SHA1

cbe2fcb6ec0a62fefd015c1236659b1f588b4b75
SHA256

bc63d4bcd55e3abd6e8a983cc3737fd3506ae8278cf4cb9ece6dfbf15d8df05b
SHA512

03f673206e44dbb50a5f00fd505a676a5b2bf5338fb0d37d090de275600579d76e9ff90feae6da1992d448a97cb2d1cc53ab21ccb175895abb7442c9cabbdbff
SSDEEP

24576:ZhAPjz/u1MLpf32Vkx7Sc3xgb+83arkbR/xPt1O/E9kgNoVd1xTfhOK3O:ZhAPjz/u1yVBJW8qkCW1Nhh3O

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2112	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\bc63d4bcd55e3abd6e8a983cc3737fd3506ae8278cf4cb9ece6dfbf15d8df05b.dll,#1
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2112