Analysis
- max time kernel
70s - max time network
120s - platform
windows10_x64 - resource
win10 - submitted
20/07/2020, 07:34
General
- Target RFQ4638B.exe
- Size 724KB
- Sample200720-lrhpd28xps
- SHA256 0fb739ef1d92cb9e84d30184e289bdcc2e1d851d302e69665d34ce9768c3ddbc
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RFQ4638B.exe"C:\Users\Admin\AppData\Local\Temp\RFQ4638B.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken