19253541b7bef86bef9e9b702e5afc55266e6a3078b90ef53131a2c8a977949c

Analysis

max time kernel
105s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 01:41

Target
19253541b7bef86bef9e9b702e5afc55266e6a3078b90ef53131a2c8a977949c.exe
Size 1.8MB
Sample241114-b4c4pssfpe
SHA256 19253541b7bef86bef9e9b702e5afc55266e6a3078b90ef53131a2c8a977949c
MD5 74b51be4c2b2419164973be4b8499a84
SHA1 548b71121e7a4c9f5da4f342e2608c7ce9f1d30e
SHA512 43bc0fb9820c0793df2c573796222f61c9ed462256ca91985c97e12d74548a43ff5598aa3761aee6c7fc8420ecc0e5d3b1ae8534f8abed869ef13ae783f06fb1
SSDEEP 49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZnmxZ8zouZx5e9:GemTLkNdfE0pZyO
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	1064	19253541b7bef86bef9e9b702e5afc55266e6a3078b90ef53131a2c8a977949c.exe
Token: SeLockMemoryPrivilege	1064	19253541b7bef86bef9e9b702e5afc55266e6a3078b90ef53131a2c8a977949c.exe

C:\Users\Admin\AppData\Local\Temp\19253541b7bef86bef9e9b702e5afc55266e6a3078b90ef53131a2c8a977949c.exe
"C:\Users\Admin\AppData\Local\Temp\19253541b7bef86bef9e9b702e5afc55266e6a3078b90ef53131a2c8a977949c.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1064