54a54929a28d6a369199bcc06b845f239310817807979d09bed7558a50a31908

Analysis

max time kernel
149s
max time network
140s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 22:50

Target
ZapretWrapper.exe
Size 448KB
Sample261027-2sa33sxtcy
SHA256 54a54929a28d6a369199bcc06b845f239310817807979d09bed7558a50a31908
MD5 bea09dfcb3b46800b17d543ca2d84046
SHA1 78a9e43e18b1106bdb9cabf7616aead41b90166c
SHA512 decdfaf2353ffa446444fa1b0c95ab73dc45821b6bbf82d5cdc032a46bfbbb2907603e22fb10bd2625655ab908d59c1644bfcfe61f8bc50504dcedd64f7290c0
SSDEEP 12288:YvggNaxmwWnjWg7AnKvSpQJJhVKzkZjW07U:v6jxMKvSGyWjNA
TLSH
T1EEA4BF16B3B84179E2BB8639C86188C5A733750B5761EBCF0B496CFD0EA27919E31353
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2940	ZapretWrapper.exe

C:\Users\Admin\AppData\Local\Temp\ZapretWrapper.exe
"C:\Users\Admin\AppData\Local\Temp\ZapretWrapper.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:2940