b68d4858354afd9c3bf71b17f9a171441dd6a54f6c49b15c27bf2008aec15c8e

Analysis

user interaction
yes
max time kernel
148s
max time network
146s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 01:36

Target
downloader.exe
Size 237KB
Sample260804-b1at6stth1
SHA256 b68d4858354afd9c3bf71b17f9a171441dd6a54f6c49b15c27bf2008aec15c8e
MD5 475cb345754f9f664dea7f98577c30de
SHA1 15acc87f509d412803a8dd11bfdfc32b8824911b
SHA512 57f1a4c95526038c185bc52ea65a48280847947b54629d774444da7736fa4decf2be14a49f8a3817addd2e809f1ea0209a58aa7d864418999c986e0f12f5c652
SSDEEP 3072:Z5vnr5Tbx829UOeKnn2LFzZBp13u36wKp4zULCLofVLgAJS62FkjvvoVLgdJS62G:ZBKjK2LFzZNfIUL+dAJ8wZdJ88
TLSH
T1B4347B0AB3E801B8D5ABE23D89A20902F77638274731D7DF1354527A1FA77E09E75322
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	5492	downloader.exe

C:\Users\Admin\AppData\Local\Temp\downloader.exe
"C:\Users\Admin\AppData\Local\Temp\downloader.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5492