Analysis
-
max time kernel
6s -
max time network
7s -
platform
windows11-21h2_x64 -
resource
win11-20240802-en -
resource tags
-
submitted
13/08/2024, 22:47
General
-
Target
Debug/basbootstrapper.exe
-
Size
7KB
-
MD5
612d2cc60c624cace0c0ead55e9a6835
-
SHA1
a03f4c7a1e9405b05685affa9eb782174ff8884b
-
SHA256
5eeefc739e36628f290a2165387765d9fb85457168e01e7f0a71897f29ea5658
-
SHA512
233bbdaca663743eabd502c3ea36deaa2ff213b2fddef53add2a68e574fe2f7170d06ac16ca9e585f7ff8e797cfb691e086332e6bed9383946ea1ea5de8f7182
-
SSDEEP
96:3AJu89Oltrgm823yoMjnncb6iDJlmaLJe6zNt:33rgv23ZMjncbRlmCM8
Score
6/10
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 2 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Debug\basbootstrapper.exe"C:\Users\Admin\AppData\Local\Temp\Debug\basbootstrapper.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
32KB
-
Filesize
40KB
-
Filesize
7.7MB
-
Filesize
72KB
-
Filesize
7.7MB