Analysis
- max time kernel
145s - max time network
154s - platform
windows10-2004_x64 - resource
win10v2004-20240508-en - resource tags
- submitted
22/06/2024, 22:46
General
- Target DHL_FORM_00099271654_P.exe
- Size 1.3MB
- Sample240622-2p1vbssbrn
- SHA256 5c7a8d747c0858343c409b41d793ed9409bd16d0f730891b7a2ec7feb5cd4395
Score
1/10
Malware Config
Signatures
- Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DHL_FORM_00099271654_P.exe"C:\Users\Admin\AppData\Local\Temp\DHL_FORM_00099271654_P.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
memory/5016-0-0x00000000745BE000-0x00000000745BF000-memory.dmp
memory/5016-1-0x0000000000820000-0x0000000000968000-memory.dmp
memory/5016-2-0x00000000052F0000-0x000000000538C000-memory.dmp
memory/5016-3-0x0000000005960000-0x0000000005F04000-memory.dmp
memory/5016-4-0x0000000005450000-0x00000000054E2000-memory.dmp
memory/5016-5-0x00000000745B0000-0x0000000074D60000-memory.dmp
memory/5016-6-0x00000000745BE000-0x00000000745BF000-memory.dmp
memory/5016-7-0x00000000745B0000-0x0000000074D60000-memory.dmp