Analysis
- max time kernel
73s - max time network
74s - platform
windows10_x64 - resource
win10v200722 - submitted
04/08/2020, 11:02
General
- Target po.exe
- Size 343KB
- Sample200804-52wzfb476x
- SHA256 c9044f1992ec7d31ec219353ff146261dd95b6bc2aee20cdfc4e01f0e045651e
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\po.exe"C:\Users\Admin\AppData\Local\Temp\po.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious behavior: EnumeratesProcesses