Analysis
-
max time kernel
140s -
max time network
140s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
-
submitted
19/09/2024, 04:10
General
-
Target
x86/DarkWave-Studio.exe
-
Size
762KB
-
MD5
5ccade7b81704d8fa3b43b6250a8845d
-
SHA1
7bd78f1a85125ebc3647d8ec6e9ea540860545e7
-
SHA256
c8ff5ab3c917035db9f9fcd763cf81d4a0072ba94cee30399eb53997bd43fb3d
-
SHA512
f7f33c52f6ba62737c13d1ae94450b6b0e094781a2e55fafd320a7a36d2dacb233d424331e8654792c3e87f7a4745551f5fe176ddc14d1389582531e21a6ae83
-
SSDEEP
12288:0GC9QRXFDbsO6lxyZCNGnt17wkunmSlqfDNDIMc/Q0hXUTHlt3KdxNgYuVSs:j3DYO6lxyZeGnt1ENnWNAxOTFNKPNgnR
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 2 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\x86\DarkWave-Studio.exe"C:\Users\Admin\AppData\Local\Temp\x86\DarkWave-Studio.exe"1⤵
- System Location Discovery: System Language Discovery
-
C:\Windows\system32\AUDIODG.EXEC:\Windows\system32\AUDIODG.EXE 0x498 0x4b81⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
808KB
-
Filesize
844KB