b8c78ae838e4519e6963cede41fe74be841df770a6b8fb1135ea7c4eea8d579b

Analysis

max time kernel
150s
max time network
123s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260706-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/07/2026, 18:15

Target
Luatrauma.AutoUpdater.win-x64.exe
Size 12.2MB
Sample260706-wv93asfs2n
SHA256 b8c78ae838e4519e6963cede41fe74be841df770a6b8fb1135ea7c4eea8d579b
MD5 e53ecb00fff35781f876ecffac212eee
SHA1 7b13f99267e32a3c354b87732921e5207f97c42c
SHA512 2fe559875f08b75b1d716df97930a985f39453c75ba2ab5886db21d66e4fae925e9c1f89b966d293356971b3cbceb37b7fd449a8a64f26dfbff70fd8daa578ff
SSDEEP 196608:uk8oRvgMb5vryItxNGR4dkH9PSuL1cpOJmL:u46Mb5vrfwR4dshSuL1r+
TLSH
T1F2D6AE11B3FC02A9E5BFC278C9664617D7B2785A2721E7CF115486AD2F23BD05E39322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2296	Luatrauma.AutoUpdater.win-x64.exe

C:\Users\Admin\AppData\Local\Temp\Luatrauma.AutoUpdater.win-x64.exe
"C:\Users\Admin\AppData\Local\Temp\Luatrauma.AutoUpdater.win-x64.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2296