Analysis
-
max time kernel
117s -
max time network
120s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
29-08-2024 14:06
General
-
Target
yoyf.exe
-
Size
906KB
-
MD5
e3dcc770ca9c865a719c2b1f1c5b174e
-
SHA1
3690617064fbcccba9eacc76be2e00cd34bac830
-
SHA256
7a41fa61102269baa65f7f762cf868c3c6a506fb58b590b6ae1352b864f2831e
-
SHA512
c569ebd0b2286307ba5fd18deee905b550a4a84c19a54d0c4eb1a0f006acf7814cda0f44d8fb79c72e059e997fc49c2114cdfb698734b7570b967a5c8004b1b6
-
SSDEEP
12288:bvsKwGRdLBBNNBqiLckdXZj8YNQDcodji13ywe4GOMvS5JfAu8G:bvs78RRNBqin7oYNCcoe3h9MeJ78G
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\yoyf.exe"C:\Users\Admin\AppData\Local\Temp\yoyf.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
920KB
-
Filesize
6.9MB
-
Filesize
6.9MB