60e86342f2f4acede9e13de4af2d98a473f9118cb7f753b1e7eacd7170da7176

Analysis

max time kernel
93s
max time network
101s
platform
windows10-2004_x64
resource
win10v2004-20240802-en
resource tags

arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system
submitted
09/09/2024, 21:08

Target

b3c120a448a33d4d748aab534c233620N.exe
Size

2.2MB
MD5

b3c120a448a33d4d748aab534c233620
SHA1

6d043de35016f3e48ab13c270139b9bcb25cd5e0
SHA256

60e86342f2f4acede9e13de4af2d98a473f9118cb7f753b1e7eacd7170da7176
SHA512

22ff5060f19dad7913977c105d10ababa6fa7828a3a6095bd84314502f912bf2572bf92007bda3489eb171cd31343679ce3244fedf9e812505629b185a08bf01
SSDEEP

49152:a+ubcN2K/mJvi6qSjXVpuOrkltw/FqtLJ9aLZNW4kO1XX:a+ubKROIQXVJQA/stMPWpaX

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	2348	b3c120a448a33d4d748aab534c233620N.exe
Token: SeIncBasePriorityPrivilege	2348	b3c120a448a33d4d748aab534c233620N.exe

C:\Users\Admin\AppData\Local\Temp\b3c120a448a33d4d748aab534c233620N.exe
"C:\Users\Admin\AppData\Local\Temp\b3c120a448a33d4d748aab534c233620N.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2348