da0c5c185b5b06fd65cc65d6baf9174f68dedcc4c1591736126416a3b89bf667

Analysis

max time kernel
149s
max time network
148s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/07/2026, 21:35

Target
tmp1jnj81xv.exe
Size 15.3MB
Sample260704-1feeases4v
SHA256 da0c5c185b5b06fd65cc65d6baf9174f68dedcc4c1591736126416a3b89bf667
MD5 58eee8548bb0ec4aa8809e8d17ee7f9d
SHA1 56eaf6f280671a9198ea511e115e2be65f01d420
SHA512 db144a0141c3b6877dd712ec744a00e6d8f4a465596e348e6b1874753448a1928b3b476e4bb89781e5470506c3d5accd1b942005218460509884c9703c435fd4
SSDEEP 98304:6dlJhHIAUxdS+TsNYasWmc1BsGE+ZmD3tSOYoHwfLk3vSmaR0+Mc4AN0edaAHDff:63/HDU24sfsWVLsh+ZJObAbN0E
TLSH
T157F67D4523FC2635E3F74B35A970621A4D76BC1AA912D78E1B887A1D1A72780CCF0B77
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2144	tmp1jnj81xv.exe

C:\Users\Admin\AppData\Local\Temp\tmp1jnj81xv.exe
"C:\Users\Admin\AppData\Local\Temp\tmp1jnj81xv.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2144