Analysis
- max time kernel
132s - max time network
142s - platform
windows10_x64 - resource
win10v20210408 - submitted
17/05/2021, 11:56
General
- Target DHL_document11022020680908911.exe
- Size 908KB
- Sample210517-e5dsr55wcs
- SHA256 e276b5f5931b82efa92a3d7a9e771b672c2e65fc69b04acb921ef96eff08f4f3
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL_document11022020680908911.exe"C:\Users\Admin\AppData\Local\Temp\DHL_document11022020680908911.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/660-114-0x0000000000960000-0x0000000000961000-memory.dmp
memory/660-116-0x0000000005830000-0x0000000005831000-memory.dmp
memory/660-117-0x0000000005330000-0x0000000005331000-memory.dmp
memory/660-118-0x00000000053D0000-0x00000000053D1000-memory.dmp
memory/660-119-0x0000000005720000-0x0000000005721000-memory.dmp
memory/660-120-0x0000000005220000-0x00000000052B2000-memory.dmp