953ceb565c546596e47faf172a3b335aef2630d7fb9926dd293f3fc0bd63792b | Triage

Analysis

max time kernel
123s
max time network
124s
platform
windows10_x64
resource
win10
submitted
13-07-2020 08:42

Sharing

Report Analysis Logs

General

Target

S.exe
Size

737KB
MD5

f6add28e2354ce6bb3b11ed12cd24e57
SHA1

9370297e4b60b145af2d334ab0e7411ad9995696
SHA256

953ceb565c546596e47faf172a3b335aef2630d7fb9926dd293f3fc0bd63792b
SHA512

cdd04596df8b1c04737f59f75c80bf4a741021bc2fc12fc6b3f463402f28cd9c0a658869af466c5872e9e16e20544449654c16c276f529bd52a3c56a43a88d5e

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

S.exe

pid process

720 S.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

S.exe

description pid process

Token: SeDebugPrivilege 720 S.exe

C:\Users\Admin\AppData\Local\Temp\S.exe
"C:\Users\Admin\AppData\Local\Temp\S.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:720

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...