827c6b7c7a3a323dca58d77082894d96d5c1ee5cdec435d7574fc5f040564949

Analysis

max time kernel
150s
max time network
144s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
06/08/2026, 22:06

Target
827c6b7c7a3a323dca58d77082894d96d5c1ee5cdec435d7574fc5f040564949.exe
Size 3.2MB
Sample260806-11hmfsvtcs
SHA256 827c6b7c7a3a323dca58d77082894d96d5c1ee5cdec435d7574fc5f040564949
MD5 ce0e155e5bc7bd334fd646ef812ac7ef
SHA1 66638d91fdb66ecbc3d62d7d3500207317d9fbf3
SHA512 6bde755d2c60734a68ef452a8358aea107f3f8f12a7547f1481da109575bca1ee34781de0bd7c89cc8289b7294dd3849bb082145d93479a6a4f420005c24f7f3
SSDEEP 98304:yo0FIFfjXF3cXAERE8EEEiEEE6EEEYEEE/EEEvEEEsr4jXF3cXAERE8EEEiEEE6+:fjXF3cXAERE8EEEiEEE6EEEYEEE/EEE0
TLSH
T1F3F5DD91B2101355E2FF50B56C931CEADF0026A517B913C68FC8A77A2F83E9B867E507
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeTakeOwnershipPrivilege	4108	827c6b7c7a3a323dca58d77082894d96d5c1ee5cdec435d7574fc5f040564949.exe

C:\Users\Admin\AppData\Local\Temp\827c6b7c7a3a323dca58d77082894d96d5c1ee5cdec435d7574fc5f040564949.exe
"C:\Users\Admin\AppData\Local\Temp\827c6b7c7a3a323dca58d77082894d96d5c1ee5cdec435d7574fc5f040564949.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4108

memory/4108-0-0x0000000000F10000-0x0000000000F11000-memory.dmp

Download