Analysis
-
max time kernel
87s -
max time network
92s -
platform
windows7_x64 -
resource
win7 -
submitted
30-06-2020 14:17
General
-
Target
06120.PNG.exe
-
Size
406KB
-
MD5
c3324c44cfabf206b7fa36078943053a
-
SHA1
5d724c0983a2e45630bfe511f8fe72f4b0fa961c
-
SHA256
b7a402b7f1f325a60c5e39f8b156735d0eee8310abd57b3522dc529646a6253e
-
SHA512
236d3de94994bd8ae2c4676d85bc0f55a440f39d5550459c95d67fb0eadc660ff0e1963c09e959be9e4ae234c5918db9ce1817368220a99f969d43e913c1168f
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 5 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of WriteProcessMemory 20 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\06120.PNG.exe"C:\Users\Admin\AppData\Local\Temp\06120.PNG.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Users\Admin\AppData\Local\Temp\06120.PNG.exe"{path}"2⤵
-
C:\Users\Admin\AppData\Local\Temp\06120.PNG.exe"{path}"2⤵
-
C:\Users\Admin\AppData\Local\Temp\06120.PNG.exe"{path}"2⤵
-
C:\Users\Admin\AppData\Local\Temp\06120.PNG.exe"{path}"2⤵
-
C:\Users\Admin\AppData\Local\Temp\06120.PNG.exe"{path}"2⤵