Analysis
-
max time kernel
140s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
06-09-2024 17:53
General
-
Target
Crack/keymaker.exe
-
Size
106KB
-
MD5
451d20534ce46fc3bc0138591856a351
-
SHA1
ab8e00c328bbbd2f56f293a6a50679001dc290d0
-
SHA256
58c49cda5abab5d6af90c81cb55ef74c84af7af66443027828ba2c385fa77595
-
SHA512
a95716aaf2b4fe49f1de48fe704135c8ea59884ccb518f7fcbd19775bb74204ece0c266defc693bb9264441bd5eff78d29c4e381f6c7da0f6545f3c20dfb3d8b
-
SSDEEP
3072:q3orJUpOwgj7TUrgsxdqxf1KC3V7tcd3goQYGf:q3orJUpU7Qrgbdn7cd3gTYk
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\Crack\keymaker.exe"C:\Users\Admin\AppData\Local\Temp\Crack\keymaker.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x300 0x3381⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
244KB
-
Filesize
12KB
-
Filesize
244KB
-
Filesize
12KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB
-
Filesize
244KB