Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
14/08/2024, 03:03
General
-
Target
77235e243e7e17961c325c9874b0b361f7fed86007ead135c47a0369f8b9ad79.exe
-
Size
3.4MB
-
MD5
32cce7a71086673ab90cd8a528fa21a1
-
SHA1
ab7a9637851a2fd695bc9738be9364e05ae36ba6
-
SHA256
77235e243e7e17961c325c9874b0b361f7fed86007ead135c47a0369f8b9ad79
-
SHA512
96b178ef132814c413a85eb9c35ce3d1c8e6f71a83803eb5c527a023d8999dba97fb49ccecb120a8682ded4821e8a774fa63ea75ec8174e7a9227b928e4b5543
-
SSDEEP
98304:WvbHGZpn+8vcAAGY36VS/clxf59+XxRxy9:WvbGrcslxf59eRxy
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\77235e243e7e17961c325c9874b0b361f7fed86007ead135c47a0369f8b9ad79.exe"C:\Users\Admin\AppData\Local\Temp\77235e243e7e17961c325c9874b0b361f7fed86007ead135c47a0369f8b9ad79.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
1.1MB
-
Filesize
1.1MB
-
Filesize
20KB
-
Filesize
1.1MB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
56KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
20KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
512KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
40KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
136KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
6.9MB