0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 00:36

Target
0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb.exe
Size 1.3MB
Sample241114-aydyda1mfv
SHA256 0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb
MD5 f9ece6d7e5065b5fb47776e4959ccc06
SHA1 4d3719aa8cb2152fb9bb93c040c10922482e6df7
SHA512 f9c983a40fa3ce26b4daced321cd8a793b686aca26b20311b2d5d19e4592b5e807c6495d1c2a1e115c4923e2c179140352f18ca2d8f6ebdd45aa5b0b3f474b25
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszaDw4B/Os/IsSAN0z3ZU:GezaTF8FcNkNdfE0pZ9ozttwIRakGNrj
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	4340	0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb.exe
Token: SeLockMemoryPrivilege	4340	0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb.exe

C:\Users\Admin\AppData\Local\Temp\0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb.exe
"C:\Users\Admin\AppData\Local\Temp\0634f602ba1bbe51426ea93944619798cd0e54c175f2d8a3aba46af40968ccbb.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4340