Analysis
- max time kernel
147s - max time network
61s - platform
windows10_x64 - resource
win10v200430 - submitted
16/07/2020, 15:35
General
- Target Rfq.exe
- Size 729KB
- Sample200716-hm1pe4ax8a
- SHA256 816ae02b0e8d286ed276d179cfd2e256e02f9e78d8c5dc74df69655417b9d558
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Rfq.exe"C:\Users\Admin\AppData\Local\Temp\Rfq.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken