Analysis
-
max time kernel
136s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
26/07/2024, 01:52
General
-
Target
7ccaa63c9e8165b8a07c10ef98ba9f4b180ddd5f799c010d4f328b5b86ac3098.exe
-
Size
8.0MB
-
MD5
544064ca2ac902b848b74bf58a554973
-
SHA1
c4f1d654b058e8468f338b220682b0b3876b40ac
-
SHA256
7ccaa63c9e8165b8a07c10ef98ba9f4b180ddd5f799c010d4f328b5b86ac3098
-
SHA512
d2d5c2c033de832d68acd27b0ae5753115587d990a9824424539a970c3110e7c736a9c10ebf3a88808c41d22a65c90481d77de77ef9ca61e8dd6f8d48826f827
-
SSDEEP
196608:Mhob2kM+p4UcJumKHcbaj+8KDK7elbi47f786SpRb:MhoakPp4Ui8H+DjiU786S/
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\7ccaa63c9e8165b8a07c10ef98ba9f4b180ddd5f799c010d4f328b5b86ac3098.exe"C:\Users\Admin\AppData\Local\Temp\7ccaa63c9e8165b8a07c10ef98ba9f4b180ddd5f799c010d4f328b5b86ac3098.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken