Analysis
- max time kernel
64s - max time network
66s - platform
windows10_x64 - resource
win10 - submitted
08/08/2020, 08:13
General
- Target recibo_de_seguimiento_de_dhl.exe
- Size 785KB
- Sample200808-eb15aylnba
- SHA256 cf8fab966145ea0701db997fd11c2969c984d6793d668f84e113f358274150a6
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\recibo_de_seguimiento_de_dhl.exe"C:\Users\Admin\AppData\Local\Temp\recibo_de_seguimiento_de_dhl.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/3948-0-0x0000000073420000-0x0000000073B0E000-memory.dmp
memory/3948-1-0x00000000005E0000-0x00000000005E1000-memory.dmp
memory/3948-3-0x0000000004DF0000-0x0000000004DFF000-memory.dmp
memory/3948-4-0x0000000005AB0000-0x0000000005AB1000-memory.dmp
memory/3948-5-0x00000000056A0000-0x00000000056A1000-memory.dmp