944d682e5a7fe82f925433e395430d0cb27f6034b6bf8c15d46561de47303270

Analysis

max time kernel
150s
max time network
130s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 09:56

Target
1.exe
Size 53.3MB
Sample261002-lysbjsv15m
SHA256 944d682e5a7fe82f925433e395430d0cb27f6034b6bf8c15d46561de47303270
MD5 4f5d8e0e8ae39d0133cd66011754f4e9
SHA1 b2e10a0140861f0013e29467ba82ca3690cbf2ee
SHA512 f2b933adae7325209bdda24e1a618d6e4bac580242abec0ee2043ec7d1a7cdc4eeb31ed72723bd2eaf6efecfece5f5120d1f86a64ca1eb973737cc6b82d507d2
SSDEEP 1572864:xahdOEdbO7IK2o9daL4YebfPYuZZeXYocW:xaTud2Q60nDeIocW
TLSH
T1BEC7F11016B939E2D06346348AFECD71D9367C9A752CC09F0096FE5F7D32A429E2973A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3168	1.exe

C:\Users\Admin\AppData\Local\Temp\1.exe
"C:\Users\Admin\AppData\Local\Temp\1.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:3168