Analysis
-
max time kernel
149s -
max time network
153s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
21-05-2022 00:59
Static task
static1
Behavioral task
behavioral1
Sample
Remitttance jpg.scr
Resource
win7-20220414-en
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
Remitttance jpg.scr
Resource
win10v2004-20220414-en
windows10-2004_x64
0 signatures
0 seconds
General
-
Target
Remitttance jpg.scr
-
Size
324KB
-
MD5
dce5536f0ec74014e25f5253447d4e98
-
SHA1
29209f0f85dcdd71ef3453caf3b208c1a2120776
-
SHA256
d93fb27172d9296a4067808a2dcc325bbed786666cc49646dfd0684ad9a92beb
-
SHA512
1acf8e60b674ed698dba884658ed82be16156f85b39fe1b1c18598e64b527ccfd3b529b2b22185d85d50e5efab380c08749e189b4a83476c7ea8e69a62b515a5
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 13 IoCs
Processes:
Remitttance jpg.scrpid process 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr 2692 Remitttance jpg.scr -
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes:
Remitttance jpg.scrdescription pid process Token: SeDebugPrivilege 2692 Remitttance jpg.scr