Analysis
- max time kernel
143s - max time network
56s - platform
windows10_x64 - resource
win10v200722 - submitted
30/07/2020, 06:19
General
- Target URGENT PURCHASE ORDER FOR IMM SHIPMENT - EXWORKS - 10FCL SCAN DOCUMENT 0000110023.exe
- Size 788KB
- Sample200730-962ttf732j
- SHA256 a1d2c856822cf2e66b6fd68d4e07f090839c4989099531585af171665ae25067
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\URGENT PURCHASE ORDER FOR IMM SHIPMENT - EXWORKS - 10FCL SCAN DOCUMENT 0000110023.exe"C:\Users\Admin\AppData\Local\Temp\URGENT PURCHASE ORDER FOR IMM SHIPMENT - EXWORKS - 10FCL SCAN DOCUMENT 0000110023.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken