c02ba487ae0a18de093a7c7d1adc4e283c91cac620240105f083630b81f178f6

Analysis

max time kernel
105s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 01:53

Target
c02ba487ae0a18de093a7c7d1adc4e283c91cac620240105f083630b81f178f6.exe
Size 1.3MB
Sample241114-cbazbawnbn
SHA256 c02ba487ae0a18de093a7c7d1adc4e283c91cac620240105f083630b81f178f6
MD5 2cc57b645aec4574cb8d0014b93aefb5
SHA1 99267cf912c47904820402a76a0089ab11e97696
SHA512 89808764aefb0c24904807bbbfff6da1a3b9b98e6576816957a25c58a6d46fa287529730b17bf38d92be961b24e762f06c43de84520bcc645b6e4cc3dc213048
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszQEMrFaQILduSs6Zkq/:GezaTF8FcNkNdfE0pZ9ozttwIRQCEi
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	4000	c02ba487ae0a18de093a7c7d1adc4e283c91cac620240105f083630b81f178f6.exe
Token: SeLockMemoryPrivilege	4000	c02ba487ae0a18de093a7c7d1adc4e283c91cac620240105f083630b81f178f6.exe

C:\Users\Admin\AppData\Local\Temp\c02ba487ae0a18de093a7c7d1adc4e283c91cac620240105f083630b81f178f6.exe
"C:\Users\Admin\AppData\Local\Temp\c02ba487ae0a18de093a7c7d1adc4e283c91cac620240105f083630b81f178f6.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4000