Analysis
- max time kernel
92s - max time network
97s - platform
windows10-2004_x64 - resource
win10v2004-20240802-en - resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system - submitted
09/08/2024, 09:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SecuriteInfo.com.Win32.CrypterX-gen.28273.13775.exe
Resource
win7-20240704-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SecuriteInfo.com.Win32.CrypterX-gen.28273.13775.exe
Resource
win10v2004-20240802-en
2 signatures
150 seconds
General
- Target SecuriteInfo.com.Win32.CrypterX-gen.28273.13775.exe
- Size 908KB
- Sample240809-k4xb1ssfkf
- SHA256 d7ef63e826cf5bfea0000d292088ea87a5f301e94bb75fe7510a96f36d87d0e9
- MD5 85a9287c26148788deff9c77bab244b3
- SHA1 ca2334f97428d4a99d9d29473689c58ec31e610b
- SHA512 c8108d9056af1c128d1846746779c17d72375078978f2afd4b9dce07dd50a140f4f03b2cddbc5cbaef3565b8dec01d3dd934de86ddd01e6cba2350be44d2ecc1
- SSDEEP 12288:svsKFedb7dRWRRIobqOQGwCOySN8bwTSdd25pYC9zltA4xFgCB8:svslXdGVwChxN725pXzbAug
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SecuriteInfo.com.Win32.CrypterX-gen.28273.13775.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 4012 SecuriteInfo.com.Win32.CrypterX-gen.28273.13775.exe