Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows10_x64 -
resource
win10 -
submitted
16-07-2020 07:18
Static task
static1
Behavioral task
behavioral1
Sample
SKBMT+ Order No. SO-001172_PDF_ PDF.exe
Resource
win7v200430
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SKBMT+ Order No. SO-001172_PDF_ PDF.exe
Resource
win10
windows10_x64
0 signatures
0 seconds
General
-
Target
SKBMT+ Order No. SO-001172_PDF_ PDF.exe
-
Size
1.4MB
-
MD5
1afa1a55ea9ccb98d329dd44c631497d
-
SHA1
b2f229508cec9dd79dc1362fd78781ad994975fc
-
SHA256
51feba16fe4544448af69bc8c311f138aeec6d3c92114aaa9d00c427bbe240d8
-
SHA512
e1a74cbd93bf13ec6658367849834a97a08d607882f11a5feb58e2613c14f3a2a39e473251e630792151cbd5d76e9b0e17433a35274fa51041f31025b704c740
Score
1/10
Malware Config
Signatures
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3820 SKBMT+ Order No. SO-001172_PDF_ PDF.exe -
Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3820 SKBMT+ Order No. SO-001172_PDF_ PDF.exe