17c207fd6355fd74ea365ada3ada60485edc4f1b09e2fd4d337e90595e83dadc

Analysis

max time kernel
117s
max time network
118s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14/10/2024, 01:06

Target

17c207fd6355fd74ea365ada3ada60485edc4f1b09e2fd4d337e90595e83dadc.exe
Size

709KB
MD5

34b10383cbb9534d5a49ee98b144bb4b
SHA1

2f581b5e8d2ba123f9eb5ea20f483e4ad25175ae
SHA256

17c207fd6355fd74ea365ada3ada60485edc4f1b09e2fd4d337e90595e83dadc
SHA512

424991f27aa454084e86702a1dbc3e5fce025b5c8d8463b5442550837f23e64ab187f94cac4abbbdcb2c8cc959fd1d0db77e6db354073a2aec35013219876f0b
SSDEEP

3072:ufGL3QBlH2oUpBMexHexHexHexHexSHAKb7RA2E4kJexTYu:AZtQQQQxJbVE4kJV

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2360	17c207fd6355fd74ea365ada3ada60485edc4f1b09e2fd4d337e90595e83dadc.exe

C:\Users\Admin\AppData\Local\Temp\17c207fd6355fd74ea365ada3ada60485edc4f1b09e2fd4d337e90595e83dadc.exe
"C:\Users\Admin\AppData\Local\Temp\17c207fd6355fd74ea365ada3ada60485edc4f1b09e2fd4d337e90595e83dadc.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2360

memory/2360-0-0x000007FEF52A3000-0x000007FEF52A4000-memory.dmp

Filesize
4KB

Download
memory/2360-1-0x0000000000A50000-0x0000000000B06000-memory.dmp

Filesize
728KB

Download
memory/2360-2-0x000007FEF52A0000-0x000007FEF5C8C000-memory.dmp

Filesize
9.9MB

Download
memory/2360-3-0x000007FEF52A0000-0x000007FEF5C8C000-memory.dmp

Filesize
9.9MB

Download
memory/2360-4-0x000007FEF52A3000-0x000007FEF52A4000-memory.dmp

Filesize
4KB

Download
memory/2360-5-0x000007FEF52A0000-0x000007FEF5C8C000-memory.dmp

Filesize
9.9MB

Download