Analysis
- max time kernel
122s - max time network
136s - platform
windows10_x64 - resource
win10-en-20210920 - submitted
22/10/2021, 10:51
General
- Target DHL_119040 alış irsaliyesi belgesi,pdf.exe
- Size 138KB
- Sample211022-mxtnnabec9
- SHA256 936b41f8bcf1d1fef4e71b000e2e37c4cc2baf58b34ca848759d2a8de5b9b9aa
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 20 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL_119040 alış irsaliyesi belgesi,pdf.exe"C:\Users\Admin\AppData\Local\Temp\DHL_119040 alış irsaliyesi belgesi,pdf.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/2640-115-0x0000000000F10000-0x0000000000F11000-memory.dmp
memory/2640-117-0x00000000057E0000-0x00000000057E1000-memory.dmp
memory/2640-118-0x00000000062C0000-0x0000000006310000-memory.dmp
memory/2640-119-0x00000000063A0000-0x00000000063CA000-memory.dmp