Analysis
- max time kernel
65s - max time network
67s - platform
windows10_x64 - resource
win10 - submitted
28/07/2020, 00:22
Static task
static1
Behavioral task
behavioral1
Sample
PURCHASE ORDER P20-1241.pdf_____.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
PURCHASE ORDER P20-1241.pdf_____.exe
Resource
win10
0 signatures
0 seconds
General
- Target PURCHASE ORDER P20-1241.pdf_____.exe
- Size 712KB
- Sample200728-3hxwtq15ce
- SHA256 2e0aee7e26c5c4a21386d93a6a6c7aaac2d8b6581f9f67103ae250ccd1e6570e
- MD5 b51db0b1ba7b6ba46cd6c98950cdd5d4
- SHA1 07e2d670351ff8d8b000b41c1ec71ae0e35cbc33
- SHA512 8178cdf69a96c52a2c6ccfc6023174d6f0cd7d6370098a6c27877f409b38439fb1a0ed57396f3b855fc575424682b126f9dd7ad4fe10a0cf011b2dd2fb623e42
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3888 PURCHASE ORDER P20-1241.pdf_____.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3888 PURCHASE ORDER P20-1241.pdf_____.exe