6c0dd4b41af06c01f45933091c91023accb2d2d889e66f948a8f0ef99b963fc0

Analysis

max time kernel
148s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 10:45

Target
6c0dd4b41af06c01f45933091c91023accb2d2d889e66f948a8f0ef99b963fc0.exe
Size 5.2MB
Sample260720-mtp63afs7n
SHA256 6c0dd4b41af06c01f45933091c91023accb2d2d889e66f948a8f0ef99b963fc0
MD5 d81e8f99b70ee85c005693b478fd7bdb
SHA1 c891396a9daa178f3e26cd0278f32114958a26f5
SHA512 628005515c78d6fa16293fa8b185d5683d356ef88f8a143450a54f406af48c73c07ac7aeadadac998eab9f1ea727e562f1ce9a101709558c0f0cd6dc270ae09e
SSDEEP 98304:XmE4o0FIFfjXF3cXAERE8EEEiEEE6EEEYEEE/EEEvEEEsr4jXF3cXAERE8EEEiEd:LjXF3cXAERE8EEEiEEE6EEEYEEE/EEEK
TLSH
T16646DD91B2101355E2FF50B56C931CEADF0026A517B913C68FC8A77A2F83E9B867E507
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	4332	6c0dd4b41af06c01f45933091c91023accb2d2d889e66f948a8f0ef99b963fc0.exe

C:\Users\Admin\AppData\Local\Temp\6c0dd4b41af06c01f45933091c91023accb2d2d889e66f948a8f0ef99b963fc0.exe
"C:\Users\Admin\AppData\Local\Temp\6c0dd4b41af06c01f45933091c91023accb2d2d889e66f948a8f0ef99b963fc0.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4332

memory/4332-0-0x0000000002610000-0x0000000002611000-memory.dmp

Download