Analysis
- max time kernel
123s - max time network
129s - platform
windows10-2004_x64 - resource
win10v2004-20231127-en - resource tags
- submitted
04/12/2023, 08:50
General
- Target SİPARİŞ 21110278 03.12.2023_pdf .exe
- Size 91KB
- Sample231204-krk38aaa77
- SHA256 2387d52a300ae750ad5355ebd55261d3d67ef6ee6227c43bcfe09031bced5276
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 20 IoCs
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\SİPARİŞ 21110278 03.12.2023_pdf .exe"C:\Users\Admin\AppData\Local\Temp\SİPARİŞ 21110278 03.12.2023_pdf .exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/4272-1-0x0000000074C40000-0x00000000753F0000-memory.dmp
memory/4272-0-0x0000000000650000-0x000000000066C000-memory.dmp
memory/4272-2-0x00000000056D0000-0x0000000005C74000-memory.dmp
memory/4272-3-0x0000000005040000-0x00000000050D2000-memory.dmp
memory/4272-4-0x0000000005290000-0x00000000052A0000-memory.dmp
memory/4272-5-0x00000000050F0000-0x00000000050FA000-memory.dmp
memory/4272-6-0x0000000006240000-0x0000000006298000-memory.dmp
memory/4272-7-0x0000000006410000-0x0000000006450000-memory.dmp
memory/4272-8-0x0000000006550000-0x0000000006590000-memory.dmp
memory/4272-9-0x0000000006590000-0x00000000065DC000-memory.dmp
memory/4272-10-0x0000000074C40000-0x00000000753F0000-memory.dmp
memory/4272-11-0x0000000005290000-0x00000000052A0000-memory.dmp
memory/4272-13-0x0000000074C40000-0x00000000753F0000-memory.dmp