Analysis
-
max time kernel
152s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20220414-en -
submitted
31-05-2022 00:00
General
-
Target
DHL BILL OF LADING 62803217763.exe
-
Size
736KB
-
MD5
5577d22b593e5d028b779dd76891acf2
-
SHA1
c6ab92abb2f50e484aa672f71f5d04093a21cc2b
-
SHA256
64c4c850be4f8e9a0e12eeeb015c503dd5a2d0f22b8d872678227729bb6db757
-
SHA512
3376f5c418b824343624ef1a38337f63ad49d03f71330a8419a60befdc5c355a5e8e2e862967ef846b8270832f0c6b9504b6620ea985d102ad7ecee83de84834
Score
6/10
Malware Config
Signatures
-
Adds Run key to start application 2 TTPs 1 IoCs
-
Suspicious behavior: EnumeratesProcesses 13 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL BILL OF LADING 62803217763.exe"C:\Users\Admin\AppData\Local\Temp\DHL BILL OF LADING 62803217763.exe"1⤵
- Adds Run key to start application
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
760KB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
40KB
-
Filesize
624KB
-
Filesize
408KB