602b8419d293401186a42ab0a9d84b9fbc832dffc9717989cc187b44a8b9b2f3

Analysis

max time kernel
150s
max time network
125s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
02/10/2026, 17:34

Target
602b8419d293401186a42ab0a9d84b9fbc832dffc9717989cc187b44a8b9b2f3.exe
Size 7.6MB
Sample261002-v5hkcssbjg
SHA256 602b8419d293401186a42ab0a9d84b9fbc832dffc9717989cc187b44a8b9b2f3
MD5 125aadeee1685e0e9960e4be835929ec
SHA1 688dd84965281ca185955c68addff4f551c6e74e
SHA512 d8fd93cc1ccdb4e1b0c0429273351ddbf8446e32ea11ddc7b8ba80ad65262ca613185ba3a5053907e4a358781d061f52c892de0501a8aea0766deb7c363fa2f1
SSDEEP 98304:BgoyeW2VsFNzqSO4wvT/9doYG21pE9ITxpFTU:crm9doYGSTBA
TLSH
T145864C0BE7A248E4C17685308966D772BB31FC5455306F6F49D0EE333E32A909F6A768
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeBackupPrivilege	1432	602b8419d293401186a42ab0a9d84b9fbc832dffc9717989cc187b44a8b9b2f3.exe
Token: SeRestorePrivilege	1432	602b8419d293401186a42ab0a9d84b9fbc832dffc9717989cc187b44a8b9b2f3.exe

C:\Users\Admin\AppData\Local\Temp\602b8419d293401186a42ab0a9d84b9fbc832dffc9717989cc187b44a8b9b2f3.exe
"C:\Users\Admin\AppData\Local\Temp\602b8419d293401186a42ab0a9d84b9fbc832dffc9717989cc187b44a8b9b2f3.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1432