Analysis
- max time kernel
136s - max time network
50s - platform
windows10_x64 - resource
win10v200430 - submitted
20/07/2020, 08:01
Static task
static1
Behavioral task
behavioral1
Sample
gunzipped.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
gunzipped.exe
Resource
win10v200430
0 signatures
0 seconds
General
- Target gunzipped.exe
- Size 754KB
- Sample200720-b6hmpfjya6
- SHA256 c74459bb764d02f0e2d4816a2a639f91b7abe55464a96a3b983ebeb4bc054c73
- MD5 c8e3d3b123a80acbe6c74f45e3469033
- SHA1 5ffbd6e162d69ad183b069c22e6730b546c1436f
- SHA512 ce46656864825fcbb77a24d91b77bd93e2deb35c0d1bd9b0c05be5b9d7ca19712fdf92985f18bdb91c3ec15cfd56152570c76b9c410f5c1d6a7672159c0e2721
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3848 gunzipped.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3848 gunzipped.exe