Analysis
- max time kernel
144s - max time network
59s - platform
windows10_x64 - resource
win10v200722 - submitted
04/08/2020, 13:19
Static task
static1
Behavioral task
behavioral1
Sample
SPA24173-2.jpg.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
SPA24173-2.jpg.exe
Resource
win10v200722
0 signatures
0 seconds
General
- Target SPA24173-2.jpg.exe
- Size 2.6MB
- Sample200804-hbld5tk3za
- SHA256 472da59ada8f3b584eaaedc80e852a5156e2448a0e1a3763234dbc3a62bbfd6e
- MD5 a185b2afa7a2d3027bcb7b228e713490
- SHA1 a29b17a8e37667ca8a1890e27b89902d63232b2d
- SHA512 d87a72d9a75f1128fde3bfc3b7b81cc97ba1dc8d54e40eded9836b7b8c8796e9f3bc94a67f1e81820b81a38c18e3b0690758456aa673561f049a3d2548ebfc65
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3876 SPA24173-2.jpg.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3876 SPA24173-2.jpg.exe