Analysis
-
max time kernel
1799s -
max time network
1799s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
28/08/2024, 03:45
Behavioral task
behavioral1
Sample
New Client.exe
Resource
win10v2004-20240802-en
windows10-2004-x64
3 signatures
1800 seconds
General
-
Target
New Client.exe
-
Size
164KB
-
MD5
0ccb051a9a352ee957f663364e488c7e
-
SHA1
e08fedc0326d15833604a3c571d7cbcce1019860
-
SHA256
a449decbf13c13535ce4ae2cac7e8e94e41d0a6a360f3634fc2f6e2f9700ba82
-
SHA512
cbd6aa301b9ee756afcbd58cc5f40daea8c41dbba561cd547504e05a313e34a5444457652bdad96932c7a73d4f4ba2a7f10e68a0bc04b9b58d4c907066598377
-
SSDEEP
3072:0ba/m/vFmtn4FadPPpIpmA9mxEHYKCsP6bHeyUsJ5EhgfR:0baSUxIpYS48Cbr55b
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language New Client.exe -
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 4624 New Client.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeDebugPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe Token: SeIncBasePriorityPrivilege 4624 New Client.exe Token: 33 4624 New Client.exe