780044829b9f28490d8995b31b5a5ce209c25273d7f26a7b40058e809e90c944

Analysis

max time kernel
105s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 07:08

Target
780044829b9f28490d8995b31b5a5ce209c25273d7f26a7b40058e809e90c944.exe
Size 1.0MB
Sample241113-hya6gsxdkg
SHA256 780044829b9f28490d8995b31b5a5ce209c25273d7f26a7b40058e809e90c944
MD5 731992ada8e7bdaea77540f0b70e97e1
SHA1 f99be6da7db8ee9ac3cd459ebdfdd7508c9ebe68
SHA512 8db4dc4a58accae95001cad16b6c932e86af662f7626a74263e9b36bc1185a74d29fea86d597b6d4b5e9fad4f8e6d4c361d956f0e2d5228c2b8e8c2143069383
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKensz+me69OqlA:GezaTF8FcNkNdfE0pZ9ozttwIRQD
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	316	780044829b9f28490d8995b31b5a5ce209c25273d7f26a7b40058e809e90c944.exe
Token: SeLockMemoryPrivilege	316	780044829b9f28490d8995b31b5a5ce209c25273d7f26a7b40058e809e90c944.exe

C:\Users\Admin\AppData\Local\Temp\780044829b9f28490d8995b31b5a5ce209c25273d7f26a7b40058e809e90c944.exe
"C:\Users\Admin\AppData\Local\Temp\780044829b9f28490d8995b31b5a5ce209c25273d7f26a7b40058e809e90c944.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:316