Analysis
- max time kernel
135s - max time network
50s - platform
windows10_x64 - resource
win10v200430 - submitted
20/07/2020, 07:21
Static task
static1
Behavioral task
behavioral1
Sample
PO#12-2072020,xls.scr
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PO#12-2072020,xls.scr
Resource
win10v200430
0 signatures
0 seconds
General
- Target PO#12-2072020,xls.scr
- Size 436KB
- Sample200720-krhqh53nps
- SHA256 f801a919b56a279b01919f97ef89dd0543f6bd56ea922af9942e5cd80d0798bd
- MD5 565bc391081fc35d0cd305a39ae2d0a0
- SHA1 ec77c64df13c28f34a8d3a6405ca4d9767bbc5ea
- SHA512 ab8521c0bef561a35b85522630afff97c9650630131a6d14d7f771d7999f383366231b1b71ae665bbb3f59ea013868a0195c9440cf4ac6e1bdd547a0cc1efc7d
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 1516 PO#12-2072020,xls.scr - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 1516 PO#12-2072020,xls.scr