de7e69ec920dccdc40220e414a2d1b3bc05e53c5f5ea34e309bd3365aa5dae78 | Triage

Analysis

max time kernel
149s
max time network
151s
platform
windows10_x64
resource
win10v200722
submitted
31-07-2020 10:17

Sharing

Report Analysis Logs

General

Target

Q2020-07-466am.exe
Size

1.4MB
MD5

93a02efc3319e40884d86f0603d6073d
SHA1

df7966c6dda6c785ad4bcf5b7a49f0a99a9bc51e
SHA256

de7e69ec920dccdc40220e414a2d1b3bc05e53c5f5ea34e309bd3365aa5dae78
SHA512

620172b1822721b279eb1b92d288a2ee82056b77c91c59134edc1aa727524bee2e5211cc41d69e67b1dc1caf9c555e5f475b3fca97d3dd3b94b224443e5fc2c7

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

Q2020-07-466am.exe

pid process

3948 Q2020-07-466am.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

Q2020-07-466am.exe

description pid process

Token: SeDebugPrivilege 3948 Q2020-07-466am.exe

C:\Users\Admin\AppData\Local\Temp\Q2020-07-466am.exe
"C:\Users\Admin\AppData\Local\Temp\Q2020-07-466am.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3948

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...