Analysis
- max time kernel
146s - max time network
137s - platform
windows10_x64 - resource
win10v200430 - submitted
13/07/2020, 11:26
General
- Target Shipping Document PL&BL Draft.exe
- Size 730KB
- Sample200713-fwgf9bcx2n
- SHA256 5d6d79cf8e947dbd356240026f305d09c23e61990bf0302d9020d7fa935254ae
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Shipping Document PL&BL Draft.exe"C:\Users\Admin\AppData\Local\Temp\Shipping Document PL&BL Draft.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: EnumeratesProcesses