Analysis
-
max time kernel
120s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
24/08/2024, 01:57
General
-
Target
start.exe
-
Size
289KB
-
MD5
35855d9e5ed17cf54eeb737445e9b322
-
SHA1
af83f3e7d5e72594219fc82d382306ac4e7c7c63
-
SHA256
ee6213e1ede22ff119e384806bdc0d11b7895069d9248415015361ba62378d21
-
SHA512
70e964eef50eda4788188854135d060bb6bacea816ebb561ce5d409d69c521b2838f99c5377c20719e1db206b37d0d61dd37862bed409fa1b7d8ef300a9392c3
-
SSDEEP
3072:8R/AwrAJXmPMW/F7azqvquJIfLpq3KXIY6fE0trQAnXkbIHLrl55him8nDX:82wrAJXYMW/BnFJIfLpHXWjrQeBhim8T
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 8 IoCs
-
Suspicious use of SetWindowsHookEx 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\start.exe"C:\Users\Admin\AppData\Local\Temp\start.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx