Analysis
- max time kernel
146s - max time network
147s - platform
windows10_x64 - resource
win10v200430 - submitted
17/07/2020, 20:40
General
- Target FedEx's AWB#530532320464350.pdf.exe
- Size 881KB
- Sample200717-tkx6aentrn
- SHA256 a70fef725d796b5adb74d12567424fe976af6539cc49d7c0fb9cfbf5812edb03
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FedEx's AWB#530532320464350.pdf.exe"C:\Users\Admin\AppData\Local\Temp\FedEx's AWB#530532320464350.pdf.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: EnumeratesProcesses