Analysis
- max time kernel
150s - max time network
67s - platform
windows10_x64 - resource
win10v200430 - submitted
24/06/2020, 15:05
General
- Target payslip.exe
- Size 377KB
- Sample200624-ntdccp116j
- SHA256 c128856d5c14b0bdf9b327cc2abbec30cfdfb5c0692f7ac57bc22551037da339
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious behavior: EnumeratesProcesses 8 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\payslip.exe"C:\Users\Admin\AppData\Local\Temp\payslip.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: EnumeratesProcesses