Analysis
-
max time kernel
13s -
max time network
0s -
platform
windows7_x64 -
resource
win7-20240704-en -
resource tags
-
submitted
21/08/2024, 16:56
General
-
Target
6be870a327fedb1258622601ddb2462e4464b4ab345a7d51a3fab53bb4788e19.exe
-
Size
249KB
-
MD5
9eb37a90b78718f251b000e046918a74
-
SHA1
8f7c9b8b6f2b601151b327d86afa750b8dc7f0d1
-
SHA256
6be870a327fedb1258622601ddb2462e4464b4ab345a7d51a3fab53bb4788e19
-
SHA512
705350ce48550f4b5f10ee717c3e0d7f6ec53d96b4aff3f17a4de8bbbe257b948e4930120bbb6b9338cc2bc4ae155865bf5e4f68b84bf12a25ef06b9eadfab8f
-
SSDEEP
3072:2FP90WVIdxe9oH5w9RtKfpI6PaxNFsNMR4U/tQjnVGjkOAg0FuzmoCBqn3kryftv:2ZCi96uJ6PafFs6BdXAOzrnUrkItE
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\6be870a327fedb1258622601ddb2462e4464b4ab345a7d51a3fab53bb4788e19.exe"C:\Users\Admin\AppData\Local\Temp\6be870a327fedb1258622601ddb2462e4464b4ab345a7d51a3fab53bb4788e19.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken