f0d92fbccd9439159e6b12b961a1a4bc09937cc26490ad88ef6839d0f80c75fd

Analysis

max time kernel
105s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 08:14

Target
f0d92fbccd9439159e6b12b961a1a4bc09937cc26490ad88ef6839d0f80c75fd.exe
Size 1.3MB
Sample241113-j415jaycjq
SHA256 f0d92fbccd9439159e6b12b961a1a4bc09937cc26490ad88ef6839d0f80c75fd
MD5 52ad8f73f1280eee3ef57e3b4db23aa5
SHA1 e5bb56f1086a854ddba141155b354b54830d9b52
SHA512 e19f93ec6b5be07b8b9e751eee8be97e5c142c790de26a0d7290ab9977d0b211e53502587a3f96ec758451559a4cc95bec4792329e27a297b1a86e51f4a82236
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5ph70VwVaPO:GezaTF8FcNkNdfE0pZ9ozttwIRx2Vj5I
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	2936	f0d92fbccd9439159e6b12b961a1a4bc09937cc26490ad88ef6839d0f80c75fd.exe
Token: SeLockMemoryPrivilege	2936	f0d92fbccd9439159e6b12b961a1a4bc09937cc26490ad88ef6839d0f80c75fd.exe

C:\Users\Admin\AppData\Local\Temp\f0d92fbccd9439159e6b12b961a1a4bc09937cc26490ad88ef6839d0f80c75fd.exe
"C:\Users\Admin\AppData\Local\Temp\f0d92fbccd9439159e6b12b961a1a4bc09937cc26490ad88ef6839d0f80c75fd.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2936