8ebf7cb165e953d4253556cb857bf6978d138890e0f85a8f74c13401350ac887 | Triage

Analysis

max time kernel
126s
max time network
127s
platform
windows10_x64
resource
win10
submitted
13-07-2020 06:42

Sharing

Report Analysis Logs

General

Target

Credit Advice_355674.exe
Size

718KB
MD5

86e3de0df8e4311e8de5450e73fe36c4
SHA1

f22c915c83a0d6aeaf84397c091b88edb9ee3cb1
SHA256

8ebf7cb165e953d4253556cb857bf6978d138890e0f85a8f74c13401350ac887
SHA512

034f799061323dc6bee36103a9a3463c8dbb093c187687cab919f0605f91bd0e5616a4f95e569916c98645f0aea3acf6c667a947e81c3d8aafc761d6b8866dd3

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

Credit Advice_355674.exe

description pid process

Token: SeDebugPrivilege 344 Credit Advice_355674.exe
Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

Credit Advice_355674.exe

pid process

344 Credit Advice_355674.exe

C:\Users\Admin\AppData\Local\Temp\Credit Advice_355674.exe
"C:\Users\Admin\AppData\Local\Temp\Credit Advice_355674.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: EnumeratesProcesses
PID:344

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...