89aa4ead0005e188779ba2d1f5a5b5a1312540a17b922632a5215690e4b7ceff

Analysis

max time kernel
149s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
30/05/2026, 04:49

Target
89aa4ead0005e188779ba2d1f5a5b5a1312540a17b922632a5215690e4b7ceff.exe
Size 12.9MB
Sample260530-ff2vdaf17k
SHA256 89aa4ead0005e188779ba2d1f5a5b5a1312540a17b922632a5215690e4b7ceff
MD5 4ec4b5a6cd32b3606e6b42dc98b0a313
SHA1 77f278e3eb9802e403c51699ca9370a0f9abb799
SHA512 70f730c09506f0d9db696b1c789a61a6778eafe67c7ce528f8c014a7c9a5fd49d8c4900373ba5254f89e5db98951509de8c1c36fd45b3e80db8d841daccfbdce
SSDEEP 196608:Qt4SUNh0sAEOehMsTCsIv9Zgbgxg+aNwP3:QlUtAEthMsGrv9Zgbgxg+aNwP3
TLSH
T175D66B17F9A558E9C0AEC134897292237B71BC494B3163D72B90F7282F72BD0AE79351
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4288	89aa4ead0005e188779ba2d1f5a5b5a1312540a17b922632a5215690e4b7ceff.exe

C:\Users\Admin\AppData\Local\Temp\89aa4ead0005e188779ba2d1f5a5b5a1312540a17b922632a5215690e4b7ceff.exe
"C:\Users\Admin\AppData\Local\Temp\89aa4ead0005e188779ba2d1f5a5b5a1312540a17b922632a5215690e4b7ceff.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4288