793c1207412cf6dcc05a36669d440f8758007473494c87255a6ad36b47656894

Analysis

max time kernel
162s
max time network
152s
platform
windows7_x64
resource
win7-20240708-en
resource tags

arch:x64arch:x86image:win7-20240708-enlocale:en-usos:windows7-x64system
submitted
23-07-2024 17:19

Target

02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO.zip
Size

5.5MB
MD5

cf7dc1a262de5723db3cb163bd3d8074
SHA1

0822ab83c57e4f005ba63099245cbb321f3aa1b8
SHA256

793c1207412cf6dcc05a36669d440f8758007473494c87255a6ad36b47656894
SHA512

77ca5ef5ba86ce8f1a7c2fd5421198c05bcae685caa6ee97d2cff9c17cfa389c7633c7a418f44755467869c73ad1a338853a824cc74ab5f99ecf52c3884fa1db
SSDEEP

98304:q6PLLXrGzp96y+SSeluWL+jmMQTFsamaLo4dsCQHozGNDSns9u3IHu4kStH2rBGK:VnXrGv6y+SAWs46cU4qczGNGsgIHpkZJ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	2492	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2492	AUDIODG.EXE
Token: 33	2492	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2492	AUDIODG.EXE

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\02-CITACION DEMANADA-JUZGADO 01 PROMISCUO DEL CIRCUITO.zip"
1⤵
PID:2416

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x7c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2492