Analysis
- max time kernel
119s - max time network
142s - platform
windows10_x64 - resource
win10v200430 - submitted
17/07/2020, 21:36
Static task
static1
Behavioral task
behavioral1
Sample
Please Confirm Your Shipment Address.0001.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Please Confirm Your Shipment Address.0001.exe
Resource
win10v200430
0 signatures
0 seconds
General
- Target Please Confirm Your Shipment Address.0001.exe
- Size 4.6MB
- Sample200717-dtklnn692x
- SHA256 88b855230b87d175f2d18abc165aeabc52e8f2952ac09d2db7e0f4d012f3ec43
- MD5 d3e658b177c856dbf4b18f367a6cb272
- SHA1 c258783242a75f34c6fdf39b5b877d00a77bef50
- SHA512 a4583a6b2f632d0930df47e0b804a538a97dfe5d297322966640b03472b0315804d3840edd9121b3e69fc40d7b3aea5175f18929f077ce66cf07efe30bae91c4
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1652 Please Confirm Your Shipment Address.0001.exe - Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1652 Please Confirm Your Shipment Address.0001.exe