f67337d939b7a8d33762e080856099d05b5ff3404bc285f4dd249281289f57c8 | Triage

Analysis

max time kernel
131s
max time network
132s
platform
windows10_x64
resource
win10
submitted
31-07-2020 16:09

Sharing

Report Analysis Logs

General

Target

Encomenda a Fornecedor nº 2177.exe
Size

637KB
MD5

05fbb43cc400bde8bbe2906e2d80d3a1
SHA1

3c9c83a029cec65cb1a45f60aca45ca2eec9215f
SHA256

f67337d939b7a8d33762e080856099d05b5ff3404bc285f4dd249281289f57c8
SHA512

7e2f6a4acac158f81ce35993b374e2e919872399bf32ce0850ecc042eb85c6c8651f0ed2f863771a2d139f499bb35ad7d26fe61f70270f753481b405e6c94eb5

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

Encomenda a Fornecedor nº 2177.exe

pid process

384 Encomenda a Fornecedor nº 2177.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

Encomenda a Fornecedor nº 2177.exe

description pid process

Token: SeDebugPrivilege 384 Encomenda a Fornecedor nº 2177.exe

C:\Users\Admin\AppData\Local\Temp\Encomenda a Fornecedor nº 2177.exe
"C:\Users\Admin\AppData\Local\Temp\Encomenda a Fornecedor nº 2177.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:384

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...