312bc3e8c7714eb7e283d8b724b183dd1b673d35a8f6aa213051c51fc9eab558

Analysis

max time kernel
105s
max time network
114s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
14/11/2024, 03:19

Target
312bc3e8c7714eb7e283d8b724b183dd1b673d35a8f6aa213051c51fc9eab558.exe
Size 1.4MB
Sample241114-dvcspaxmfr
SHA256 312bc3e8c7714eb7e283d8b724b183dd1b673d35a8f6aa213051c51fc9eab558
MD5 7a06fd78ed290313590a2555aedd83e9
SHA1 131216ba7f54ad3df90f00ef1139f4f1fe1baa71
SHA512 7935802c312b52e4c6ff1256313a15f7deecccee937d50553236416592bd0633825ae4a6241b626ace238d65c5bc3ef4494089ef18690c12dbc408050d6bd7bf
SSDEEP 24576:GezaTnG99Q8FcNrpyNdfE0bLBgDOp2iSLz9LbpwlKensziXoSPqZ650Gg3pcmA+:GezaTF8FcNkNdfE0pZ9ozttwIRReyqu
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeLockMemoryPrivilege	1840	312bc3e8c7714eb7e283d8b724b183dd1b673d35a8f6aa213051c51fc9eab558.exe
Token: SeLockMemoryPrivilege	1840	312bc3e8c7714eb7e283d8b724b183dd1b673d35a8f6aa213051c51fc9eab558.exe

C:\Users\Admin\AppData\Local\Temp\312bc3e8c7714eb7e283d8b724b183dd1b673d35a8f6aa213051c51fc9eab558.exe
"C:\Users\Admin\AppData\Local\Temp\312bc3e8c7714eb7e283d8b724b183dd1b673d35a8f6aa213051c51fc9eab558.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1840