Analysis
- max time kernel
69s - max time network
118s - platform
windows10_x64 - resource
win10 - submitted
13/07/2020, 11:44
General
- Target DHL001173980920PDF.exe
- Size 780KB
- Sample200713-avbdb8ezka
- SHA256 e2d112bd0fd186acce6eebc6ec5d389c69fd6ae1154d0f44938de68dedec29cc
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL001173980920PDF.exe"C:\Users\Admin\AppData\Local\Temp\DHL001173980920PDF.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken