8953321e02a80b7aaaecde3c0cf6c855f30209d745cc2ef007c94e95519ec1e6

Analysis

max time kernel
105s
max time network
116s
platform
windows7_x64
resource
win7-20240903-en
resource tags

arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
submitted
14/11/2024, 02:35

Target
8953321e02a80b7aaaecde3c0cf6c855f30209d745cc2ef007c94e95519ec1e6.exe
Size 1.3MB
Sample241114-c2575stcld
SHA256 8953321e02a80b7aaaecde3c0cf6c855f30209d745cc2ef007c94e95519ec1e6
MD5 93df366a5371c27c7579b3e10d451a31
SHA1 7c518aa1c2d01b76b4c810e48babbf7ae59c1247
SHA512 73394ddb77cef4b928a9d274eeda96ec36111126315b011a85fde48bb87d8813b0950cfb4efa7704af301815133428b3b7b0a7861af7522b0a3354398fc1a00b
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKensziXoSPqZ650Ggd6:GezaTF8FcNkNdfE0pZ9ozttwIRReyd6
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	2092	8953321e02a80b7aaaecde3c0cf6c855f30209d745cc2ef007c94e95519ec1e6.exe
Token: SeLockMemoryPrivilege	2092	8953321e02a80b7aaaecde3c0cf6c855f30209d745cc2ef007c94e95519ec1e6.exe

C:\Users\Admin\AppData\Local\Temp\8953321e02a80b7aaaecde3c0cf6c855f30209d745cc2ef007c94e95519ec1e6.exe
"C:\Users\Admin\AppData\Local\Temp\8953321e02a80b7aaaecde3c0cf6c855f30209d745cc2ef007c94e95519ec1e6.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2092

memory/2092-0-0x00000000001F0000-0x0000000000200000-memory.dmp

Download