Analysis
-
max time kernel
11s -
max time network
12s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
13-09-2024 19:20
General
-
Target
DUC40.exe
-
Size
339KB
-
MD5
ccbb3c81469d426354994fdb58506451
-
SHA1
8c8d2b6440797de0eb190177defbcf8e209a889c
-
SHA256
aad09c161909a7d290a395d80c3cfd2aecd953b4e45a9ca017d460f036b68580
-
SHA512
dc16922e7ec583790d1399eccb8d19adb1f6d9193a502b5926e07fd968e47892622dc57c4762ab81bcac7bf29de448c4f73518cc0122373718b2435ce18a2ad3
-
SSDEEP
3072:xeZeMmQ6PZ/0JsYoA6XKp222ltZKpnFsRQqA844VUtZKCd27FIH3dpvxe0GBgqA:IsMmQ6PJa2tAFeZA844VUtAfEiA
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of FindShellTrayWindow 2 IoCs
-
Suspicious use of SendNotifyMessage 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\DUC40.exe"C:\Users\Admin\AppData\Local\Temp\DUC40.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
5.7MB
-
Filesize
4KB
-
Filesize
5.7MB
-
Filesize
5.7MB