4e50fe58cf19f9cf7e118596ceae6c70a6fa27f3f295a5e46e1e1907c0a39d5f

Analysis

max time kernel
105s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 06:54

Target
4e50fe58cf19f9cf7e118596ceae6c70a6fa27f3f295a5e46e1e1907c0a39d5f.exe
Size 1.3MB
Sample241113-hppyaawpcw
SHA256 4e50fe58cf19f9cf7e118596ceae6c70a6fa27f3f295a5e46e1e1907c0a39d5f
MD5 3c520a0460e340fddc754a544808b53b
SHA1 73321abf49f4eb7994cd7573d04124d86b59648f
SHA512 ef698017bbbec1b5be38742e7bdfcd3c1e5a419283a067851175d958be603d672fb4045bc7d27da565af3d3e6826f8dbc08e30a900007c6e5df6e47d57cc15b8
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5ph70VwyM+Y:GezaTF8FcNkNdfE0pZ9ozttwIRx2VQ+Y
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	3480	4e50fe58cf19f9cf7e118596ceae6c70a6fa27f3f295a5e46e1e1907c0a39d5f.exe
Token: SeLockMemoryPrivilege	3480	4e50fe58cf19f9cf7e118596ceae6c70a6fa27f3f295a5e46e1e1907c0a39d5f.exe

C:\Users\Admin\AppData\Local\Temp\4e50fe58cf19f9cf7e118596ceae6c70a6fa27f3f295a5e46e1e1907c0a39d5f.exe
"C:\Users\Admin\AppData\Local\Temp\4e50fe58cf19f9cf7e118596ceae6c70a6fa27f3f295a5e46e1e1907c0a39d5f.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3480