Analysis
-
max time kernel
145s -
max time network
128s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
17-08-2024 02:35
General
-
Target
4e36339be646b84744a90c88cc87b3930c9f1b4636f94bc7ae9af041d9ed3130.exe
-
Size
956KB
-
MD5
10d7bc6bc07b1d407393429b01e64ab8
-
SHA1
ccbfc19cdd8303fb4faf25caf7672cc58f1bea0e
-
SHA256
4e36339be646b84744a90c88cc87b3930c9f1b4636f94bc7ae9af041d9ed3130
-
SHA512
95c04756018846bcfd2f9c9681b184cf1b5ed98577272a22c4f3b6eb4abc7a86f18babe706d41f5f192da0ea741d64f857b7e2d12faf874c6eb1cd8a3bae94b4
-
SSDEEP
12288:XHgC35cfJwdrB+rAbNNhqaLQDm+eyBxK8p554pAb6Pi0XFY7JtnUI6:XXJchwgAf8a0LBVuubisY
Score
6/10
Malware Config
Signatures
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\4e36339be646b84744a90c88cc87b3930c9f1b4636f94bc7ae9af041d9ed3130.exe"C:\Users\Admin\AppData\Local\Temp\4e36339be646b84744a90c88cc87b3930c9f1b4636f94bc7ae9af041d9ed3130.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
976KB
-
Filesize
408KB
-
Filesize
7.7MB
-
Filesize
704KB
-
Filesize
136KB
-
Filesize
3.3MB
-
Filesize
4KB
-
Filesize
7.7MB
-
Filesize
32KB
-
Filesize
160KB
-
Filesize
32KB
-
Filesize
7.7MB
-
Filesize
32KB
-
Filesize
224KB
-
Filesize
56KB
-
Filesize
7.7MB