Analysis
- max time kernel
150s - max time network
94s - platform
windows10_x64 - resource
win10 - submitted
05/08/2020, 07:59
Static task
static1
Behavioral task
behavioral1
Sample
NEW ORDER #56787654567890.exe
Resource
win7
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
NEW ORDER #56787654567890.exe
Resource
win10
0 signatures
0 seconds
General
- Target NEW ORDER #56787654567890.exe
- Size 439KB
- Sample200805-x5f71b4496
- SHA256 7c73899c0587f768cfbb871b9305c7b47e85b39c330c5f82fd79345ee914d3d6
- MD5 da826d3a3169edc4f9f38fad273db8f7
- SHA1 8f20468d87e252c46d76e862724f63d6e86db5dd
- SHA512 900dc3461d0eb1edc7592019f2d13f33ac65979dca5a1c54ebddc1e86b2599cd5a43f82198bfd747480755e0d93679ef35752b19e3f71e1294a3feb82bd99f20
- MD5 SHA1 SHA512
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 3068 NEW ORDER #56787654567890.exe - Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 3068 NEW ORDER #56787654567890.exe