Overview

overview

10

Static

static

Payment Ad...5].exe

windows7_x64

10

Payment Ad...5].exe

windows10_x64

10

Analysis

  • max time kernel
    145s
  • max time network
    149s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    13/07/2020, 11:53

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Payment Advice - Advice Ref[GLV404865688] Priority payment Customer Ref[200012052N47095].exe
  • Size 372KB
  • Sample200713-mcj8f74kw6
  • SHA256 defa4bbf78e4e2330ed2f8dbd98c66bf4e4713d7e2b336ba96b8b99e2f80dd0d
  • MD5 SHA1 SHA512
Score
10/10
persistence

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Modifies WinLogon for persistence 2 TTPs 1 IoCs
    persistence

Processes

  • C:\Users\Admin\AppData\Local\Temp\Payment Advice - Advice Ref[GLV404865688] Priority payment Customer Ref[200012052N47095].exe
    "C:\Users\Admin\AppData\Local\Temp\Payment Advice - Advice Ref[GLV404865688] Priority payment Customer Ref[200012052N47095].exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Modifies WinLogon for persistence
    PID:3832

Network

        MITRE ATT&CK Enterprise v6

        Replay Monitor

        Loading Replay Monitor...

        Downloads