060c1d915b9c3c7b1bc2b2f3f7e87bc6149efb2b44467f3e0a4456dec722eaa7 | Triage

Analysis

max time kernel
66s
max time network
68s
platform
windows10_x64
resource
win10v200430
submitted
15-07-2020 18:09

Sharing

Report Analysis Logs

General

Target

060c1d915b9c3c7b1bc2b2f3f7e87bc6149efb2b44467f3e0a4456dec722eaa7.exe
Size

592KB
MD5

703fa7aea54ba069f48ea3ef1d33a5ea
SHA1

620a2ada97578ad6074010afb1a159c0ba150299
SHA256

060c1d915b9c3c7b1bc2b2f3f7e87bc6149efb2b44467f3e0a4456dec722eaa7
SHA512

df53c1d32e9c5ef3a631aaa13bb306b2149007d863f86ec525ad832050aa31f6a79f6c595ca669bb871a5da4465b4d50483067562fb1b5693374a1c8f4311535

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	2564	060c1d915b9c3c7b1bc2b2f3f7e87bc6149efb2b44467f3e0a4456dec722eaa7.exe

Suspicious behavior: EnumeratesProcesses 1 IoCs

pid	Process
2564	060c1d915b9c3c7b1bc2b2f3f7e87bc6149efb2b44467f3e0a4456dec722eaa7.exe

C:\Users\Admin\AppData\Local\Temp\060c1d915b9c3c7b1bc2b2f3f7e87bc6149efb2b44467f3e0a4456dec722eaa7.exe
"C:\Users\Admin\AppData\Local\Temp\060c1d915b9c3c7b1bc2b2f3f7e87bc6149efb2b44467f3e0a4456dec722eaa7.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: EnumeratesProcesses
PID:2564

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads