Analysis
- max time kernel
69s - max time network
128s - platform
windows10_x64 - resource
win10v200722 - submitted
14/10/2020, 15:11
General
- Target PRICE with SHORTEST DELIVERY TIME.exe
- Size 776KB
- Sample201014-zck8rrrjgn
- SHA256 7891ae9d0d99198c2fa2e77bb5f937b22ffa4ffa83c6fbba6a012b7054b4b1b9
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 2 IoCs
- Suspicious use of AdjustPrivilegeToken 2 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\PRICE with SHORTEST DELIVERY TIME.exe"C:\Users\Admin\AppData\Local\Temp\PRICE with SHORTEST DELIVERY TIME.exe"1⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\Microsoft.NET\Framework\v2.0.50727\dw20.exedw20.exe -x -s 8562⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4024-1-0x0000000002A10000-0x0000000002A11000-memory.dmp
memory/4024-2-0x0000000002A10000-0x0000000002A11000-memory.dmp
memory/4024-4-0x0000000002A10000-0x0000000002A11000-memory.dmp
memory/4024-6-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-7-0x0000000002F30000-0x0000000002F31000-memory.dmp
memory/4024-8-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-9-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-10-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-11-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-12-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-13-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-14-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-15-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-16-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-17-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-18-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-19-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-20-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-21-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-22-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-23-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-24-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-25-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-26-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-28-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-27-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-29-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-30-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-31-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-32-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-33-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-34-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-35-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-36-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-37-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-38-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-39-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-40-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-41-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-42-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-43-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-44-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-45-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-46-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-47-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-48-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-49-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-50-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-51-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-52-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-53-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-54-0x0000000000940000-0x0000000000941000-memory.dmp
memory/4024-55-0x0000000000940000-0x0000000000941000-memory.dmp