6bed6688a5079ea2510d4dd862c6aa43eb92c09356685801037a722d7df2bcdb

Analysis

max time kernel
105s
max time network
113s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 00:04

Target
6bed6688a5079ea2510d4dd862c6aa43eb92c09356685801037a722d7df2bcdb.exe
Size 1.4MB
Sample241114-acpsra1grc
SHA256 6bed6688a5079ea2510d4dd862c6aa43eb92c09356685801037a722d7df2bcdb
MD5 2948192fec16b9d6d8ff12a9a4104d1e
SHA1 089e60f8611d908d24da2af6e29e39c7bcd63ffe
SHA512 7a1f95d301b44067a8ed9e92f1fd9127493961b0a4a0c5c838f9b405a604286561b040c69aaf86783085b7d85f7c6cec6ef5d706900a2c9459be2e1a039f8997
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5O+7MMKTbc+:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5M
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	1436	6bed6688a5079ea2510d4dd862c6aa43eb92c09356685801037a722d7df2bcdb.exe
Token: SeLockMemoryPrivilege	1436	6bed6688a5079ea2510d4dd862c6aa43eb92c09356685801037a722d7df2bcdb.exe

C:\Users\Admin\AppData\Local\Temp\6bed6688a5079ea2510d4dd862c6aa43eb92c09356685801037a722d7df2bcdb.exe
"C:\Users\Admin\AppData\Local\Temp\6bed6688a5079ea2510d4dd862c6aa43eb92c09356685801037a722d7df2bcdb.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1436