4f6120757e65a4104e3545d122cfadc47b9ef53671ef5e593002903376d6e870

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 01:55

Target
4f6120757e65a4104e3545d122cfadc47b9ef53671ef5e593002903376d6e870.exe
Size 1.7MB
Sample241114-cb7naawncr
SHA256 4f6120757e65a4104e3545d122cfadc47b9ef53671ef5e593002903376d6e870
MD5 055f11f0d15702cdeff338f25ccbf14c
SHA1 890a66a2c8028996ba79edbf7c37a4b0888b25b7
SHA512 d09ce1961e190f1808aaf992d026c35ca8a440e9600f9aeba8701c5296360c570f1d73e598ba685c3a26b9bac2a142bdc566c7a6977d248804d4ea4b68b1e416
SSDEEP 49152:GezaTF8FcNkNdfE0pZ9ozttwIRxj4c5yOBZlC8kS:GemTLkNdfE0pZy/
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	3784	4f6120757e65a4104e3545d122cfadc47b9ef53671ef5e593002903376d6e870.exe
Token: SeLockMemoryPrivilege	3784	4f6120757e65a4104e3545d122cfadc47b9ef53671ef5e593002903376d6e870.exe

C:\Users\Admin\AppData\Local\Temp\4f6120757e65a4104e3545d122cfadc47b9ef53671ef5e593002903376d6e870.exe
"C:\Users\Admin\AppData\Local\Temp\4f6120757e65a4104e3545d122cfadc47b9ef53671ef5e593002903376d6e870.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3784