c72be13da09549bc1dbb19008a921a8cb655390e01e4226e817b9dd8a1f48f70

Analysis

max time kernel
148s
max time network
153s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
20/07/2026, 12:20

Target
c72be13da09549bc1dbb19008a921a8cb655390e01e4226e817b9dd8a1f48f70.exe
Size 4.5MB
Sample260720-phra4ab16s
SHA256 c72be13da09549bc1dbb19008a921a8cb655390e01e4226e817b9dd8a1f48f70
MD5 dfea1e75d4a48abe87eb4899cf335ad8
SHA1 fd1d27753ace0fdb1fa4cb61e0d1e1aa1286026e
SHA512 7ce78be4bb9f63a2dd602ebd1dd5028245b611af7f843b454a6ca448eb2e3725d9f380645b19f94c8780d56df68b47d1bcfca5e7cc4d137032a1ea9b1f6bbbfa
SSDEEP 98304:rE4o0FIFfjXF3cXAERE8EEEiEEE6EEEYEEE/EEEvEEEsr4jXF3cXAERE8EEEiEE:+jXF3cXAERE8EEEiEEE6EEEYEEE/EEE8
TLSH
T15126DD91B2101355E2FF50B56C931CEADF0026A517B913C68FC8A77A2F83E9B867E507
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	2236	c72be13da09549bc1dbb19008a921a8cb655390e01e4226e817b9dd8a1f48f70.exe

C:\Users\Admin\AppData\Local\Temp\c72be13da09549bc1dbb19008a921a8cb655390e01e4226e817b9dd8a1f48f70.exe
"C:\Users\Admin\AppData\Local\Temp\c72be13da09549bc1dbb19008a921a8cb655390e01e4226e817b9dd8a1f48f70.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2236

memory/2236-0-0x0000000002150000-0x0000000002151000-memory.dmp

Download