1495b35e300855e73afc91577b7f59f26c3aa1de232f038459c57dd5429595b9

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 12:12

Target
1495b35e300855e73afc91577b7f59f26c3aa1de232f038459c57dd5429595b9.exe
Size 1.7MB
Sample241113-pc89qasbjp
SHA256 1495b35e300855e73afc91577b7f59f26c3aa1de232f038459c57dd5429595b9
MD5 f6ad43d27c8d2c9be2d7f5a0e0182a42
SHA1 af388340587af5e0a7f6ed8430aea79b1f850e77
SHA512 a64b2f85959c8c6e4cae7ddaf980cc387fe1529353e2e59ef225fef113a2ae97ec35a6dc79c7c75fe7e790a97ce6986f564e6bd622cc1083d4cacddf78170ce5
SSDEEP 49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZlCD:GemTLkNdfE0pZyQ
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	4560	1495b35e300855e73afc91577b7f59f26c3aa1de232f038459c57dd5429595b9.exe
Token: SeLockMemoryPrivilege	4560	1495b35e300855e73afc91577b7f59f26c3aa1de232f038459c57dd5429595b9.exe

C:\Users\Admin\AppData\Local\Temp\1495b35e300855e73afc91577b7f59f26c3aa1de232f038459c57dd5429595b9.exe
"C:\Users\Admin\AppData\Local\Temp\1495b35e300855e73afc91577b7f59f26c3aa1de232f038459c57dd5429595b9.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4560