Analysis

  • max time kernel
    44s
  • max time network
    50s
  • platform
    windows7_x64
  • resource
    win7v200430
  • submitted
    13-07-2020 20:13

General

  • Target

    doc-071320201.exe

  • Size

    327KB

  • MD5

    a7fe386df37ae66d6f28ed9b91e0278f

  • SHA1

    dceb0561f18341c51ee40a453c37953b89797160

  • SHA256

    0947492a00cd402a32d498a1d7f1e2d30e1a1c5d48cc65fbef5784f7593b1eee

  • SHA512

    ea02095237a9b3559af35051e8d58bacee7ccc4d9127237f73eef6d756e504fe439cb0ba282705dd0aac4f87b6393148c6081453e22e5dc4ac9f0358918780e9

Malware Config

Signatures

Processes

  • C:\Users\Admin\AppData\Local\Temp\doc-071320201.exe
    "C:\Users\Admin\AppData\Local\Temp\doc-071320201.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious behavior: RenamesItself
    • Suspicious use of AdjustPrivilegeToken
    PID:824

Network

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

3
T1081

Collection

Data from Local System

3
T1005

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/824-1-0x0000000000000000-0x0000000000000000-disk.dmp