351b5ba15c375e4c56f5a3a1c1f6b5656bc87298690081078896e37f8aba9063

Analysis

max time kernel
119s
max time network
120s
platform
windows7_x64
resource
win7-20240729-en
resource tags

arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
submitted
01/08/2024, 21:34

Target

065350902b20989c45e845c425781ef0N.dll
Size

1.4MB
MD5

065350902b20989c45e845c425781ef0
SHA1

3502b5244b5ddd67f88f691a6ad017914c0b3e13
SHA256

351b5ba15c375e4c56f5a3a1c1f6b5656bc87298690081078896e37f8aba9063
SHA512

2a1e4727304044d8f71639c73c14f1ec9de596fca448fe0731361995b8de7131af69a0afdb9c893794f7585545c876d519dce7609310efde376d5379ba8874bb
SSDEEP

24576:IQ+OuL3KOCmq+iGBosR0560crMCnWbU1UtCmB2Fkjr1LXXMCmJ0N6JWM940pb:IQjUT054rMFCmB2FkjrdX4a05

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2932	rundll32.exe

C:\Windows\system32\rundll32.exe
rundll32.exe C:\Users\Admin\AppData\Local\Temp\065350902b20989c45e845c425781ef0N.dll,#1
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2932