e55fbbf64be3edcf5aca372f0f9ab59ca10cb11af919a2b23acf16e310f1dec4

Analysis

max time kernel
105s
max time network
116s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 01:58

Target
e55fbbf64be3edcf5aca372f0f9ab59ca10cb11af919a2b23acf16e310f1dec4.exe
Size 1.2MB
Sample241114-cebd9ashqq
SHA256 e55fbbf64be3edcf5aca372f0f9ab59ca10cb11af919a2b23acf16e310f1dec4
MD5 f77558c626cfb726ef8014d1f9e7f68d
SHA1 a1fd6d5f1b8265b14c1eac869db69e5af1fd2160
SHA512 9bb48d128ac0baa6296b453a4ac7bf62266e42205e38d987280c89327a281b7418ed387e0af488c5f682a009ff8cbb9f2d618a6c19093719b058d7c43d6dd6a7
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszbWKDNEm/5ph70VwBj+:GezaTF8FcNkNdfE0pZ9ozttwIRx2VG+
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	1880	e55fbbf64be3edcf5aca372f0f9ab59ca10cb11af919a2b23acf16e310f1dec4.exe
Token: SeLockMemoryPrivilege	1880	e55fbbf64be3edcf5aca372f0f9ab59ca10cb11af919a2b23acf16e310f1dec4.exe

C:\Users\Admin\AppData\Local\Temp\e55fbbf64be3edcf5aca372f0f9ab59ca10cb11af919a2b23acf16e310f1dec4.exe
"C:\Users\Admin\AppData\Local\Temp\e55fbbf64be3edcf5aca372f0f9ab59ca10cb11af919a2b23acf16e310f1dec4.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1880

memory/1880-0-0x000001CB29260000-0x000001CB29270000-memory.dmp

Download