Analysis

  • max time kernel
    124s
  • max time network
    124s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    24/07/2020, 10:55

General

  • Target
    Bestellnummer 4115272-072020.PDF________.exe
  • Size 817KB
  • Sample200724-kbl14ezzmn
  • SHA256 ac20f8f16efd13ea704488eb43b1a761f9e26bcdc70ac70d57cb15cbdab200bb
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Bestellnummer 4115272-072020.PDF________.exe
    "C:\Users\Admin\AppData\Local\Temp\Bestellnummer 4115272-072020.PDF________.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:792

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads