Analysis
- max time kernel
118s - max time network
121s - platform
windows10_x64 - resource
win10 - submitted
16/07/2020, 07:57
General
- Target OBJEDNÃVKA #49384CF1900-pdf.exe
- Size 662KB
- Sample200716-2elgtpdeh2
- SHA256 a2f6070d226ea3e37126cf9a65bdc444d9fd0cf3ffe14cc2b0fa1169f5230924
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\OBJEDNÃVKA #49384CF1900-pdf.exe"C:\Users\Admin\AppData\Local\Temp\OBJEDNÃVKA #49384CF1900-pdf.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken