Analysis
-
max time kernel
139s -
max time network
149s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
23/08/2024, 09:59
General
-
Target
NShutClt/NShutClt.exe
-
Size
264KB
-
MD5
59b99ab3a4104d36d70647903cf8c4bb
-
SHA1
cc5d648ab608108ae676ad22cece6257ce91c2df
-
SHA256
2cc654d37ea84e7caef4e9c479779d202432b187327c66d3fce36ddc96e8ddc5
-
SHA512
f1b544a448f13e92451cf60cbd6c2e9031dd31958ef3ad220acb54d7b26adfc3061d308fc7ce9fa111016e6f10ad5ee4e7a1c79cdc966f154b159adaf10b2b0a
-
SSDEEP
6144:Ue8RSsvMkD+43Zfb1ftQBrgbKbM6HZZpV3OkqW7NNZY8:j2SsvTfJfSGKtHZZLNNZv
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\NShutClt\NShutClt.exe"C:\Users\Admin\AppData\Local\Temp\NShutClt\NShutClt.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx