b26a81d14fc41578f71041708814831bf43aa28224c7046c3f8bc969e56413b7

Analysis

max time kernel
93s
max time network
96s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
19/11/2024, 11:29

Target

b26a81d14fc41578f71041708814831bf43aa28224c7046c3f8bc969e56413b7N.exe
Size

418KB
MD5

bb20ff6e95e5a50b05566ccf19d60180
SHA1

994b0c3d3b64a65920657ff87e067febb3090a6a
SHA256

b26a81d14fc41578f71041708814831bf43aa28224c7046c3f8bc969e56413b7
SHA512

742d66f96e8ab6a4fc38ddebe2d503d08250e0ac4f0f79b59752aed773a4b26d60022a838ab2c61e25679e4dc7baa2517fe870189fa4a24d33d1f3142c5ca626
SSDEEP

6144:2hK4XycqgpfCup5sVxuZ04ahAjT7S8ce2MyIS9CgQLfh28zhWmhSnkw0:2tLrnq4yN+fh28dWmhdT

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3164	b26a81d14fc41578f71041708814831bf43aa28224c7046c3f8bc969e56413b7N.exe

C:\Users\Admin\AppData\Local\Temp\b26a81d14fc41578f71041708814831bf43aa28224c7046c3f8bc969e56413b7N.exe
"C:\Users\Admin\AppData\Local\Temp\b26a81d14fc41578f71041708814831bf43aa28224c7046c3f8bc969e56413b7N.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3164