10edec7a2fe45850408a5267720dc866dc8eee6d5bf5a124a7cdf50f8ff9b848

Analysis

max time kernel
133s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
26/08/2024, 06:48

Target

c27b89afd332ddb0a74d4267574654de_JaffaCakes118.exe
Size

345KB
MD5

c27b89afd332ddb0a74d4267574654de
SHA1

411d7eecbec41c64cf899e9d25726bcd9eaefb89
SHA256

10edec7a2fe45850408a5267720dc866dc8eee6d5bf5a124a7cdf50f8ff9b848
SHA512

0aacfad6ebc9fcd939bb558f99eee2cacc0bf6c7eda36323017f2c619532008a5c5613229f07e03df72d26e2df9407cfd042e633e9aa7549430814df579bbda6
SSDEEP

6144:mNZd31PuSc5Y52Dt3VHhI1CztOz+PTdi2ltjv//E87YzTBIxEwkT:mTd31PuIqt3gCEzoR7YzTK

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	1100	c27b89afd332ddb0a74d4267574654de_JaffaCakes118.exe

C:\Users\Admin\AppData\Local\Temp\c27b89afd332ddb0a74d4267574654de_JaffaCakes118.exe
"C:\Users\Admin\AppData\Local\Temp\c27b89afd332ddb0a74d4267574654de_JaffaCakes118.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1100