98ff4591aba1ef93fc0e407f69a88d2fdab03cdd3fcb2d2491b52b5606871e51

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 11:48

Target
98ff4591aba1ef93fc0e407f69a88d2fdab03cdd3fcb2d2491b52b5606871e51.exe
Size 1.4MB
Sample241113-nyhs8a1emf
SHA256 98ff4591aba1ef93fc0e407f69a88d2fdab03cdd3fcb2d2491b52b5606871e51
MD5 a23ba7a8aa2f245ec743f36dec4a2092
SHA1 a946194b580bfd6df5ecdb7423b22387e5e0557e
SHA512 e5bac384e6c255a83365e5c9eb9509cd8af09bc963ab04952a0b11f77515c0b4e8b5e66d7dc57fd707cbea49f373874f6a63414990421d5641592149e1a13a4d
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKensziXoSPqZScXoiRIKdlXj:GezaTF8FcNkNdfE0pZ9ozttwIRRXRnnd
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	764	98ff4591aba1ef93fc0e407f69a88d2fdab03cdd3fcb2d2491b52b5606871e51.exe
Token: SeLockMemoryPrivilege	764	98ff4591aba1ef93fc0e407f69a88d2fdab03cdd3fcb2d2491b52b5606871e51.exe

C:\Users\Admin\AppData\Local\Temp\98ff4591aba1ef93fc0e407f69a88d2fdab03cdd3fcb2d2491b52b5606871e51.exe
"C:\Users\Admin\AppData\Local\Temp\98ff4591aba1ef93fc0e407f69a88d2fdab03cdd3fcb2d2491b52b5606871e51.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:764