Analysis
-
max time kernel
128s -
max time network
42s -
platform
windows10_x64 -
resource
win10v200430 -
submitted
16-06-2020 09:51
Static task
static1
Behavioral task
behavioral1
Sample
ZIRAT BANKA.IFT MESAJI.exe
Resource
win7v200430
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
ZIRAT BANKA.IFT MESAJI.exe
Resource
win10v200430
windows10_x64
0 signatures
0 seconds
General
-
Target
ZIRAT BANKA.IFT MESAJI.exe
-
Size
1.2MB
-
MD5
96463f1796847224b85a96752b59ff17
-
SHA1
ca05cf6c0eac29a22d1296a15804cec36a908347
-
SHA256
1f1e1c079253f774dc02a7ff4e103a781573288802ba8c87af6790626fbcfca6
-
SHA512
cd27c0801d2d33ddb0ce26a769fd51e844f8ac7301079afab3c786822c529cb924b7db7e4a1992af77edf011ad4ffd586191a8754ca3738846605eb67acf3f5c
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
ZIRAT BANKA.IFT MESAJI.exedescription pid Process Token: SeDebugPrivilege 3264 ZIRAT BANKA.IFT MESAJI.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
ZIRAT BANKA.IFT MESAJI.exepid Process 3264 ZIRAT BANKA.IFT MESAJI.exe