fcdf38f844a00bbac2436ab550fa62bc015a7850bb5bda4258fd0e930f3cd7c9

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 22:25

Target
fcdf38f844a00bbac2436ab550fa62bc015a7850bb5bda4258fd0e930f3cd7c9.exe
Size 1.3MB
Sample241113-2b2jpstpfl
SHA256 fcdf38f844a00bbac2436ab550fa62bc015a7850bb5bda4258fd0e930f3cd7c9
MD5 c51c4331b34e55237dc2e5cb64e5f0fa
SHA1 ada1bcff7169d813a32e3bece59e1198e61aaa7d
SHA512 53d28574356ad6e1844f1a2ebe7f18119a90b5582be53cda003641e9efa8d5b27de52ad585644d49d713d3566709ad95b4a904d6fb1204370662ba4a57e5a882
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKensziXoSPqZUdZeoo:GezaTF8FcNkNdfE0pZ9ozttwIRRYdbo
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	4712	fcdf38f844a00bbac2436ab550fa62bc015a7850bb5bda4258fd0e930f3cd7c9.exe
Token: SeLockMemoryPrivilege	4712	fcdf38f844a00bbac2436ab550fa62bc015a7850bb5bda4258fd0e930f3cd7c9.exe

C:\Users\Admin\AppData\Local\Temp\fcdf38f844a00bbac2436ab550fa62bc015a7850bb5bda4258fd0e930f3cd7c9.exe
"C:\Users\Admin\AppData\Local\Temp\fcdf38f844a00bbac2436ab550fa62bc015a7850bb5bda4258fd0e930f3cd7c9.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4712