Analysis
- max time kernel
96s - max time network
120s - platform
windows10_x64 - resource
win10 - submitted
15/10/2020, 17:26
General
- Target FEDEX CONFIRMATION - 0987847_Pdf.exe
- Size 370KB
- Sample201015-eeap3pt2vj
- SHA256 378911a0ffd090bc26b1bb981abe1c5bb8dec098e3138ef0b9a7f1ce88747fbd
Score
1/10
Malware Config
Signatures
- Delays execution with timeout.exe 1 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
- Suspicious use of WriteProcessMemory 3 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\FEDEX CONFIRMATION - 0987847_Pdf.exe"C:\Users\Admin\AppData\Local\Temp\FEDEX CONFIRMATION - 0987847_Pdf.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\timeout.exetimeout 42⤵
- Delays execution with timeout.exe
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/976-0-0x0000000073710000-0x0000000073DFE000-memory.dmp
memory/976-1-0x0000000000DE0000-0x0000000000DE1000-memory.dmp
memory/976-3-0x00000000057D0000-0x00000000057D1000-memory.dmp
memory/976-4-0x0000000005EB0000-0x0000000005EB1000-memory.dmp
memory/976-5-0x0000000005AB0000-0x0000000005AB1000-memory.dmp
memory/976-7-0x00000000056E0000-0x00000000056E1000-memory.dmp