Analysis
-
max time kernel
121s -
max time network
126s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
06-09-2024 07:20
General
-
Target
Quote Order.exe
-
Size
408KB
-
MD5
2d180e659ae8180b343e4abddc7f304c
-
SHA1
7725c303e9ea8e747666436b913c5491b16a8952
-
SHA256
6fed5f74f0fa613ef25311cfc20d8b38abc5cf4b4c9183e34aa7386882dcf1ee
-
SHA512
37c38c59e0e629b5d28c930886eea0096530c42d473ef70f5a6aa53801bdb6386e1fe154cd6b0904325a82268dd0372355fb0fa0a401c06c5e725091e087e201
-
SSDEEP
6144:Lmb3/DGv75a3j51E+S6bjNeksVG9tAA1tIX3NYi/cXZ6TGJy:ZD5aTEb6nzdGA1tIYi/cXZY
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Quote Order.exe"C:\Users\Admin\AppData\Local\Temp\Quote Order.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
432KB
-
Filesize
6.9MB
-
Filesize
6.9MB