5a2a08a833846bc63bca44c171c8044901e48b2ece468e54b02b034e2890cd67

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 03:00

Target
5a2a08a833846bc63bca44c171c8044901e48b2ece468e54b02b034e2890cd67.exe
Size 1.3MB
Sample241114-dhgacatelf
SHA256 5a2a08a833846bc63bca44c171c8044901e48b2ece468e54b02b034e2890cd67
MD5 94c1fc01ea86db34a6f45e7a1336a9ba
SHA1 490eef1ba495681326b9233e6461ef3ce0e0bfc3
SHA512 73f3f6c34fdebfc3cd16b9852c8147bcc4a05bfedbc60868f88ee808ad5ae37fbde54012377a13518c99a9c83cfe74ce042fbc8487d95fac9ba01646a0aac2d2
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKenszaDw4BnT6DNtMiQkLU/j:GezaTF8FcNkNdfE0pZ9ozttwIRakGngA
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	4776	5a2a08a833846bc63bca44c171c8044901e48b2ece468e54b02b034e2890cd67.exe
Token: SeLockMemoryPrivilege	4776	5a2a08a833846bc63bca44c171c8044901e48b2ece468e54b02b034e2890cd67.exe

C:\Users\Admin\AppData\Local\Temp\5a2a08a833846bc63bca44c171c8044901e48b2ece468e54b02b034e2890cd67.exe
"C:\Users\Admin\AppData\Local\Temp\5a2a08a833846bc63bca44c171c8044901e48b2ece468e54b02b034e2890cd67.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4776