Analysis
-
max time kernel
839s -
max time network
844s -
platform
windows7_x64 -
resource
win7-20240705-es -
resource tags
-
submitted
25-07-2024 23:29
General
-
Target
05 CITACION DEMANDA EN SU CONTRA - JUZGADO PENAL 01 DEL CIRCUITO RAMA JUDICIAL ESPECIALIZADO/barrette.accdb
-
Size
17KB
-
MD5
3de728173727b206fe14724ba05a28c2
-
SHA1
407ca05387c9fc1ac22cd409df1f0899d49a7cde
-
SHA256
f923b85549cf4d2f87c11f4cdeb5abb408974aea8235aa68acc849736ebdde28
-
SHA512
33b6e43f6bdaf31b7387ffa683e9581afb4d9b170767e6c6a51180608568db9675fb16643ff462dfd53c6ca76789902553d9bb6e834734fbd8ce4f8726b76206
-
SSDEEP
384:moEH9+fB4OMKekS2JF9v3nd9wS+MdogIKR9ZEvUGDcMdMzGjVP:DEH9KfMKQWzv3dJPogIKR9iUWc/ajVP
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 3 IoCs
Processes
-
C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE"C:\Program Files (x86)\Microsoft Office\Office14\MSACCESS.EXE" /NOSTARTUP "C:\Users\Admin\AppData\Local\Temp\05 CITACION DEMANDA EN SU CONTRA - JUZGADO PENAL 01 DEL CIRCUITO RAMA JUDICIAL ESPECIALIZADO\barrette.accdb"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
44KB
-
Filesize
4KB
-
Filesize
44KB