Analysis
-
max time kernel
149s -
max time network
159s -
platform
windows10-2004_x64 -
resource
win10v2004-20240709-en -
resource tags
-
submitted
27/07/2024, 19:58
General
-
Target
$TEMP/keygen.exe
-
Size
617KB
-
MD5
799a3fac28bd66af1ddf0b6ddf1d0af1
-
SHA1
07911828e00b8b010bbe33de17dc56313a0a57c8
-
SHA256
69fe16cc0744ffaa1ab9bcfbe46c199766522c9ef9de387c6d500a143260cf26
-
SHA512
c47c9a66759f635aec41a53200640d55e6db5fd7a3537a4dec52ad6810e4bd28e3fcfb2f5a48238665dd161e084f6fe5aa48e8bc235c71cea620cd603926083c
-
SSDEEP
12288:pc/kEPDonR6Y436vRs8lTXmfXblQlllblcPHZPNl8lTMwEXPYV6Omrzm2UZp9Vb:oLonR6Y43X8h2fXblQlllblcvZ1l8lTj
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"C:\Users\Admin\AppData\Local\Temp\$TEMP\keygen.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x3c0 0x4101⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
260KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB
-
Filesize
76KB