e0c0a69f8f756b3ab1bc1bf2f5537dbb36a4057f5b1672729cd320d7ac343d62

Analysis

max time kernel
150s
max time network
154s
platform
windows7_x64
resource
win7-20240221-en
resource tags

arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
submitted
09/05/2024, 06:23 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Dhl.exe
Size

216KB
MD5

35d15d8d64bf7e1f434106b50ae925ce
SHA1

b0a43deb88658d2960acb63106bcc6c4e6c3740c
SHA256

e0c0a69f8f756b3ab1bc1bf2f5537dbb36a4057f5b1672729cd320d7ac343d62
SHA512

7bd55bc3cedea3ce5adbee8ab424f291136c128d4134646e9794221b0e52effe03fe695bb4523499a9e947593145977d3cb454f184046e3814a21f83b288705a
SSDEEP

6144:9Akztmr9r/EDpppppppppppppppppppppppppppppb3:f5mr9r/+pppppppppppppppppppppppv

Score

1^/10

Malware Config

Signatures

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	640	Dhl.exe

C:\Users\Admin\AppData\Local\Temp\Dhl.exe
"C:\Users\Admin\AppData\Local\Temp\Dhl.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:640

Network

DNS

nhatminhthanh.com.vn

Dhl.exe

Remote address:

8.8.8.8:53

Request

nhatminhthanh.com.vn

IN A

Response

nhatminhthanh.com.vn

IN A

45.119.81.131

45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
702 B
6
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

406 B
702 B
6
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

406 B
702 B
6
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
662 B
6
3
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
662 B
7
3
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

564 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
742 B
5
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

354 B
702 B
5
4
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

452 B
742 B
7
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

400 B
742 B
6
5
45.119.81.131:443

nhatminhthanh.com.vn

tls

Dhl.exe

262 B
52 B
3
1
45.119.81.131:443

Dhl.exe

8.8.8.8:53

nhatminhthanh.com.vn

dns

Dhl.exe

66 B
82 B
1
1

DNS Request

nhatminhthanh.com.vn

DNS Response

45.119.81.131

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/640-0-0x000007FEF5BA3000-0x000007FEF5BA4000-memory.dmp

Filesize
4KB

Download
memory/640-1-0x0000000000B30000-0x0000000000B6C000-memory.dmp

Filesize
240KB

Download
memory/640-2-0x000007FEF5BA0000-0x000007FEF658C000-memory.dmp

Filesize
9.9MB

Download
memory/640-3-0x000007FEF5BA3000-0x000007FEF5BA4000-memory.dmp

Filesize
4KB

Download
memory/640-4-0x000007FEF5BA0000-0x000007FEF658C000-memory.dmp

Filesize
9.9MB

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

DNS Request

DNS Response

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.