60e211424d25734d656dce67853714990b9ff1bed242e7fefeda6b46ecc76a9b

Analysis

max time kernel
149s
max time network
152s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
20/11/2024, 03:55

Target

60e211424d25734d656dce67853714990b9ff1bed242e7fefeda6b46ecc76a9b.exe
Size

726KB
MD5

d2f89a86551161510a1b658cd3a92b0c
SHA1

84d6f2d2520e6ec9f97d0b850fb38ef10003136b
SHA256

60e211424d25734d656dce67853714990b9ff1bed242e7fefeda6b46ecc76a9b
SHA512

e68d462d167e6a78b78d854a5f9783a2a40e33040f7e3b341c41d5ea2106ff6c4f8134603a6bf3db7bc0d7dd0b603056f5ebfadfc60db6139269b2798652aeb1
SSDEEP

12288:8G059krqV2HK+1rNzGIMGZnOdMJFQ3C0:8Ged1+1rNiIMGgdmQ

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeBackupPrivilege	3700	60e211424d25734d656dce67853714990b9ff1bed242e7fefeda6b46ecc76a9b.exe

C:\Users\Admin\AppData\Local\Temp\60e211424d25734d656dce67853714990b9ff1bed242e7fefeda6b46ecc76a9b.exe
"C:\Users\Admin\AppData\Local\Temp\60e211424d25734d656dce67853714990b9ff1bed242e7fefeda6b46ecc76a9b.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3700