Analysis
-
max time kernel
142s -
max time network
97s -
platform
windows10_x64 -
resource
win10v200722 -
submitted
31-07-2020 13:40
Static task
static1
Behavioral task
behavioral1
Sample
Shipment Document BL INV and Packing list Attached.exe
Resource
win7
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Shipment Document BL INV and Packing list Attached.exe
Resource
win10v200722
windows10_x64
0 signatures
0 seconds
General
-
Target
Shipment Document BL INV and Packing list Attached.exe
-
Size
641KB
-
MD5
2c0979106f8289a6bd62cade3af2445e
-
SHA1
0d632ae33206a89914a30f2db54ac4c2fb5e77d5
-
SHA256
c76eb44cecc21c33fb6f61db8ed02e9d0a560f988e9bafb1c9fff5164afb2cb8
-
SHA512
afb0104591c8570abda324e98042dd30ab29129b72af9c64359b314be6627925802e6fce300acb78290dd68df9b3783463b498514ab2e2d1e04d537953cb5961
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
Shipment Document BL INV and Packing list Attached.exepid process 500 Shipment Document BL INV and Packing list Attached.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Shipment Document BL INV and Packing list Attached.exedescription pid process Token: SeDebugPrivilege 500 Shipment Document BL INV and Packing list Attached.exe