Analysis
- max time kernel
118s - max time network
118s - platform
windows7_x64 - resource
win7-en-20211104 - submitted
01/12/2021, 08:44
General
- Target Досудебное требование.xll
- Size 556KB
- Sample211201-km7fnaeae8
- SHA256 03bbdb538b33b62be11ae0ee9b783d8d492bf0a3597176f81e8f11ccbd59fce3
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Windows\system32\regsvr32.exeregsvr32 /s "C:\Users\Admin\AppData\Local\Temp\Досудебное требование.xll"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/1108-55-0x000007FEFC511000-0x000007FEFC513000-memory.dmp
memory/1108-56-0x00000000001F0000-0x0000000000207000-memory.dmp
memory/1108-59-0x000000001AE54000-0x000000001AE56000-memory.dmp
memory/1108-60-0x000000001AE56000-0x000000001AE58000-memory.dmp
memory/1108-58-0x000000001AE52000-0x000000001AE54000-memory.dmp
memory/1108-61-0x0000000000440000-0x0000000000476000-memory.dmp
memory/1108-62-0x000000001AE58000-0x000000001AE59000-memory.dmp
memory/1108-63-0x000000001AE5D000-0x000000001AE7C000-memory.dmp
memory/1108-64-0x0000000000480000-0x0000000000483000-memory.dmp