Analysis

  • max time kernel
    65s
  • max time network
    67s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    28/07/2020, 00:22

General

  • Target
    PURCHASE ORDER P20-1241.pdf_____.exe
  • Size 712KB
  • Sample200728-3hxwtq15ce
  • SHA256 2e0aee7e26c5c4a21386d93a6a6c7aaac2d8b6581f9f67103ae250ccd1e6570e
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\PURCHASE ORDER P20-1241.pdf_____.exe
    "C:\Users\Admin\AppData\Local\Temp\PURCHASE ORDER P20-1241.pdf_____.exe"
    1⤵
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3888

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads