097bc53748a361c51142ae49dad68722f246826ca180351df793e9ea544a3d1c | Triage

Analysis

max time kernel
67s
max time network
112s
platform
windows10_x64
resource
win10
submitted
07-07-2020 13:12

Sharing

Report Analysis Logs

General

Target

dhl.exe
Size

633KB
MD5

f5459dedf4bb1c3e49cf8747d48ba1c8
SHA1

ab2c80eb15dd3fc75d24133e96bff51de1da81ee
SHA256

097bc53748a361c51142ae49dad68722f246826ca180351df793e9ea544a3d1c
SHA512

ac57c51859a86ec3cbbf7e9b985a74b25ef328e4fe20b15c6626b358ccf09d0705ff3e9df9a2402527438bd0e99cee1a549cf589ebb6769a2f5d88a08036791c

Score

1^/10

Malware Config

Signatures

Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes:

dhl.exe

pid process

980 dhl.exe
Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes:

dhl.exe

description pid process

Token: SeDebugPrivilege 980 dhl.exe

C:\Users\Admin\AppData\Local\Temp\dhl.exe
"C:\Users\Admin\AppData\Local\Temp\dhl.exe"
1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:980

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads