Analysis
-
max time kernel
144s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240226-en -
resource tags
-
submitted
29/02/2024, 01:17
General
-
Target
7e5f22373cad6ec823c0040bfd8708603d346513835b5863abebc5add5ba8454.exe
-
Size
137.8MB
-
MD5
2609515aadb538f946a80617f3190439
-
SHA1
84b18c0797b40c084fa6e3b2e780bcf001d4a09c
-
SHA256
7e5f22373cad6ec823c0040bfd8708603d346513835b5863abebc5add5ba8454
-
SHA512
3c8da1c5f16d5f2a407bca25d4618567066f5bd180a1325e0b4400ec6e3572002aabb4559d4fa27b4521c5b92335107b2606a0ecce58211f68163e81bbe294ab
-
SSDEEP
1572864:ngg2KWZIxjcmYXoZ9CoLQpk9vVSH3vYMfHGNyHD:ngoWZwbC7pk9dwnfaQ
Score
7/10
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 1 IoCs
Looks up country code configured in the registry, likely geofence.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7e5f22373cad6ec823c0040bfd8708603d346513835b5863abebc5add5ba8454.exe"C:\Users\Admin\AppData\Local\Temp\7e5f22373cad6ec823c0040bfd8708603d346513835b5863abebc5add5ba8454.exe"1⤵
- Checks computer location settings
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB