30091faafd62ea7ba9868db2ee575dab98fd126a78d39590f57ea7b38b20d966

Analysis

max time kernel
117s
max time network
128s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
22/09/2024, 19:09

Target
Ultimate Tweaks.exe
Size 168.2MB
Sample240922-xt4dsstgml
SHA256 3b47e84d5ca6ad15d2e8916d6cbd6af9ab943a42e84241e0517eaab66b5ef214
MD5 02c4b9609f04037960d947113bc2a017
SHA1 b593fc590fafb5e11ccceb199ff405874183c4e8
SHA512 d4b3d0f440f6c61716dc156494e0be5cb4053d170d8917f7686e26734023c4e29785f354f0bc21912da06a33547573256379874027dc990cdc91d648f176826a
SSDEEP 1572864:9QqT4eFUirK1e2zSQ5Rcw/N5cae/bHhrPdacyodvcPSBoHESUlyAzl/:vBKRcAMyAzB
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: 33	2584	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2584	AUDIODG.EXE
Token: 33	2584	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	2584	AUDIODG.EXE

C:\Users\Admin\AppData\Local\Temp\Ultimate Tweaks.exe
"C:\Users\Admin\AppData\Local\Temp\Ultimate Tweaks.exe"
1⤵
PID:2652

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x254
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2584