Overview

overview

8

Static

static

Shipmet_Do...df.exe

windows7_x64

8

Shipmet_Do...df.exe

windows10_x64

1

Analysis

  • max time kernel
    119s
  • max time network
    117s
  • platform
    windows10_x64
  • resource
    win10
  • submitted
    13-07-2020 07:00

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Shipmet_Documents_DHL_AWB #7849402748,pdf.exe

  • Size

    4.6MB

  • MD5

    7130e2694cca996709191b76808eef93

  • SHA1

    b1365ba832f6c4d6e03fc82404b966a8fa851145

  • SHA256

    4feb056769f2ac7fb07a65bfd3d5ca0fc22e8f3b3cf046fc586c782935ca2445

  • SHA512

    a2ce34dcb242d7925e610c88ad7faf8ff4396044c5da4f798bcde88e61f3643e9aff97da91a2b5a939c5007b0774517058729be17dadd45a27c6fa34a68ae024

Score
1/10

Malware Config

Signatures

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Shipmet_Documents_DHL_AWB #7849402748,pdf.exe
    "C:\Users\Admin\AppData\Local\Temp\Shipmet_Documents_DHL_AWB #7849402748,pdf.exe"
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious behavior: EnumeratesProcesses
    PID:3612

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads