Analysis
-
max time kernel
69s -
max time network
118s -
platform
windows10_x64 -
resource
win10 -
submitted
13/07/2020, 11:44
General
-
Target
DHL001173980920PDF.exe
-
Size
780KB
-
MD5
e1ddbcd4db2d987719357e468c46a469
-
SHA1
1d001797a1018683b79c898d73aa0158f08feea5
-
SHA256
e2d112bd0fd186acce6eebc6ec5d389c69fd6ae1154d0f44938de68dedec29cc
-
SHA512
d6aa3da3c9f02bd5006eeb6a86d1ffed5d3500156d8dfa8cd310e12df9a849874a6208f8e710a63467c7ad4f7ab1b5fb5cd21fdb0c69431af784e497a4b453ad
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL001173980920PDF.exe"C:\Users\Admin\AppData\Local\Temp\DHL001173980920PDF.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken