Analysis
-
max time kernel
118s -
max time network
121s -
platform
windows10_x64 -
resource
win10 -
submitted
16-07-2020 07:57
Static task
static1
Behavioral task
behavioral1
Sample
OBJEDNÃVKA #49384CF1900-pdf.exe
Resource
win7v200430
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
OBJEDNÃVKA #49384CF1900-pdf.exe
Resource
win10
0 signatures
0 seconds
General
-
Target
OBJEDNÃVKA #49384CF1900-pdf.exe
-
Size
662KB
-
MD5
d9df463bcc95bdb30ec68992c6264ea4
-
SHA1
9584a8e60555287e9c98e02c32a567d1ed265450
-
SHA256
a2f6070d226ea3e37126cf9a65bdc444d9fd0cf3ffe14cc2b0fa1169f5230924
-
SHA512
509eee84677309ebbc93622ce98d7680c09b6b43607109f484c1ce322e57c0465af0e6aa887c0c9424a8793a88e2e7263df6fc93b80d5c05f69d9b7628b7c3dd
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
OBJEDNÃVKA #49384CF1900-pdf.exepid process 3104 OBJEDNÃVKA #49384CF1900-pdf.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
OBJEDNÃVKA #49384CF1900-pdf.exedescription pid process Token: SeDebugPrivilege 3104 OBJEDNÃVKA #49384CF1900-pdf.exe