Resubmissions
03-08-2024 02:45
240803-c81k8svgne 4Analysis
-
max time kernel
149s -
max time network
150s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
03-08-2024 02:45
General
-
Target
Monoxide-sound.exe
-
Size
98KB
-
MD5
dfd563d229f9f203217d66df57ba3084
-
SHA1
fbe45679a8d15b26ac6d7f648bddffab0455eeed
-
SHA256
6b0b3288c0797e1199661330e30bce99ea22e9d1175258f2cace9063943565bb
-
SHA512
e247cea03190278cbcd006cc40ab074e6af0f1cfc116627736df5d656e59bcb4838f87c226fdc6cf298f03ac615a434d08707b17b9b5c1106722cafb7d9572db
-
SSDEEP
3072:mPYOl+2oTiF2Tso4cqFOfFA9vhKeAd+eRp/qzgf:rWFOsoQVvhKDFiA
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Monoxide-sound.exe"C:\Users\Admin\AppData\Local\Temp\Monoxide-sound.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x308 0x2b41⤵
- Suspicious use of AdjustPrivilegeToken