Analysis
- max time kernel
12s - max time network
136s - platform
windows10_x64 - resource
win10v20210408 - submitted
02/08/2021, 11:23
General
- Target RFQ 6020943651-FOR-ATENS.xls.xll.dll
- Size 879KB
- Sample210802-c9psg6q9da
- SHA256 338ffcde4891ef19f8b2974f2a9188e14a90f592322c8fb07acb662b57b35771
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s "C:\Users\Admin\AppData\Local\Temp\RFQ 6020943651-FOR-ATENS.xls.xll.dll"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/656-118-0x0000000002020000-0x0000000002037000-memory.dmp
memory/656-130-0x000000001ABB0000-0x000000001ABE6000-memory.dmp
memory/656-131-0x000000001AA70000-0x000000001AA72000-memory.dmp
memory/656-132-0x000000001AA73000-0x000000001AA75000-memory.dmp
memory/656-133-0x000000001AA76000-0x000000001AA78000-memory.dmp
memory/656-139-0x000000001AA79000-0x000000001AA7B000-memory.dmp
memory/656-140-0x000000001BB40000-0x000000001BBEF000-memory.dmp