Analysis
- max time kernel
117s - max time network
117s - platform
windows7_x64 - resource
win7-en-20211014 - submitted
22/10/2021, 10:51
General
- Target DHL_119040 alış irsaliyesi belgesi,pdf.exe
- Size 138KB
- Sample211022-mxtnnabec9
- SHA256 936b41f8bcf1d1fef4e71b000e2e37c4cc2baf58b34ca848759d2a8de5b9b9aa
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 20 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL_119040 alış irsaliyesi belgesi,pdf.exe"C:\Users\Admin\AppData\Local\Temp\DHL_119040 alış irsaliyesi belgesi,pdf.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1588-55-0x0000000000A80000-0x0000000000A81000-memory.dmp
memory/1588-57-0x00000000764D1000-0x00000000764D3000-memory.dmp
memory/1588-58-0x0000000004FB0000-0x0000000004FB1000-memory.dmp
memory/1588-59-0x0000000002040000-0x0000000002090000-memory.dmp
memory/1588-60-0x0000000000A50000-0x0000000000A7A000-memory.dmp