b002a39e974d7bd438abb78d81132e8c97c2e5067e89b2c5427f5d17fe8f8ef0

Analysis

max time kernel
105s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 23:09

Target
b002a39e974d7bd438abb78d81132e8c97c2e5067e89b2c5427f5d17fe8f8ef0.exe
Size 1.5MB
Sample241113-25csfazqa1
SHA256 b002a39e974d7bd438abb78d81132e8c97c2e5067e89b2c5427f5d17fe8f8ef0
MD5 6b120bca97f57a4c662e0892d63dbfaa
SHA1 b9fec7f6c5cc88839de99c4676e731de3b622c8f
SHA512 4981464b9380c40b248566f8136058ddf53103bd915be5d6dd58782c9d5cc69d732c2c39505768512f60e2170ea94f7ccd2115f08221d698c6d45bf455fc54f3
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbcr:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5R
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	3728	b002a39e974d7bd438abb78d81132e8c97c2e5067e89b2c5427f5d17fe8f8ef0.exe
Token: SeLockMemoryPrivilege	3728	b002a39e974d7bd438abb78d81132e8c97c2e5067e89b2c5427f5d17fe8f8ef0.exe

C:\Users\Admin\AppData\Local\Temp\b002a39e974d7bd438abb78d81132e8c97c2e5067e89b2c5427f5d17fe8f8ef0.exe
"C:\Users\Admin\AppData\Local\Temp\b002a39e974d7bd438abb78d81132e8c97c2e5067e89b2c5427f5d17fe8f8ef0.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3728