Analysis
-
max time kernel
121s -
max time network
121s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09-09-2024 03:19
General
-
Target
d3a88ab037be1a370dc7e5e637755df0N.exe
-
Size
596KB
-
MD5
d3a88ab037be1a370dc7e5e637755df0
-
SHA1
5ca21e89aa63c56b91afeaf709b71c1e1cf15167
-
SHA256
ae5f4ca290fade383b6236a1c025027c4fc1247242a13e12f12e7f6be67f63a3
-
SHA512
d28bbb14cff785b818448e68e39c66b1c2b262bae5381c8d7246229109a4daa0d836aa53b576de8eb1984c59b68dbffca646ead36e94196f594851ea0b717ea0
-
SSDEEP
12288:5H9Uy2krNPmiofiSMEVuKe2BV5Nu7tzf:5HCy2kRuifEVuKJBNu
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\d3a88ab037be1a370dc7e5e637755df0N.exe"C:\Users\Admin\AppData\Local\Temp\d3a88ab037be1a370dc7e5e637755df0N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6.9MB
-
Filesize
624KB
-
Filesize
4KB
-
Filesize
6.9MB