Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20240708-en -
resource tags
-
submitted
13-09-2024 08:58
General
-
Target
59c229ec321e2aac11ce56baddadcc50N.exe
-
Size
733KB
-
MD5
59c229ec321e2aac11ce56baddadcc50
-
SHA1
76ca8a9d32fd60c2a392e2268f6ff6f8d0034c52
-
SHA256
c7a0cde23642b5f727902fc5ce1ee2d0f38d865dd0aa4223851e6985f331542f
-
SHA512
3a77072788b8ef978a03e2734c72a7d526a720f3dfb0f58fd546cdd15848ebe0497cc1563539b14130f7b20945a1f8ddf3f534da56a5f8d1dbbbeefb1d029172
-
SSDEEP
12288:8qzcpVgUXzL0TTUKZHTNloEkOpnKgofuIwV6eAj0SZxxXMcEen3paPcg:8qzcpKIL0TvZzNlNky0wVW0SZxJVg
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of AdjustPrivilegeToken 3 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\59c229ec321e2aac11ce56baddadcc50N.exe"C:\Users\Admin\AppData\Local\Temp\59c229ec321e2aac11ce56baddadcc50N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx