Analysis
-
max time kernel
137s -
max time network
154s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
12-09-2024 09:05
General
-
Target
Tools/rdp/RDP Forcer 1.5/csrs.exe
-
Size
270KB
-
MD5
6df085a6dbc5f6dcb504c272e08f883a
-
SHA1
cd1f3bc06a9e7f060a9459186fa04d1e6064bb1c
-
SHA256
f1f91a4172379c7952d6ce16c9df13eabac4b969c3fca3006fa30c866a96c60b
-
SHA512
b53c620bbd5c5976221cff20314c1180766b4402f6dab2f6029e44ccce5ac115bea28b12f11ee2344dbf6111a0c4e3bd9868e62593feaabb96c9d9a8e1ae3e1d
-
SSDEEP
3072:lajUJwRNDPi+Y+CvN9kqQAQxATeXme7O+3FOkYSURaFhLaVyO+XBIX1Ib23aifgc:laMwRNDPi+Ynsm+O+3FjbURQMmCY2
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Tools\rdp\RDP Forcer 1.5\csrs.exe"C:\Users\Admin\AppData\Local\Temp\Tools\rdp\RDP Forcer 1.5\csrs.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
304KB
-
Filesize
5.6MB
-
Filesize
584KB