0cfd11adcb49a164927bc752b81dfc71da72cbeca626c6f2c0f642d29f5a4f29

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
13/11/2024, 20:26

Target
0cfd11adcb49a164927bc752b81dfc71da72cbeca626c6f2c0f642d29f5a4f29.exe
Size 1.4MB
Sample241113-y8a68syeka
SHA256 0cfd11adcb49a164927bc752b81dfc71da72cbeca626c6f2c0f642d29f5a4f29
MD5 b25244a0e9d1240ef303b9bce4505713
SHA1 70be42e2227a1cafc2c9d70ca0244d5fb3005ffd
SHA512 a356dd2ff00fe62c9e714014a3ceac667135d3b8e1c8a569a438faa7376016b4bcb0415044f747665db89ae9e420f8f5465476af04327ce288ac0b9d63ab4d23
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszaDw4B/Os/IsSAN0z3ZR:GezaTF8FcNkNdfE0pZ9ozttwIRakGNrK
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	2412	0cfd11adcb49a164927bc752b81dfc71da72cbeca626c6f2c0f642d29f5a4f29.exe
Token: SeLockMemoryPrivilege	2412	0cfd11adcb49a164927bc752b81dfc71da72cbeca626c6f2c0f642d29f5a4f29.exe

C:\Users\Admin\AppData\Local\Temp\0cfd11adcb49a164927bc752b81dfc71da72cbeca626c6f2c0f642d29f5a4f29.exe
"C:\Users\Admin\AppData\Local\Temp\0cfd11adcb49a164927bc752b81dfc71da72cbeca626c6f2c0f642d29f5a4f29.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2412