Analysis
-
max time kernel
121s -
max time network
122s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
19-09-2024 04:51
General
-
Target
RAT.exe
-
Size
6.0MB
-
MD5
c3e1e0a19f29d1baab94cb78ca736300
-
SHA1
128bea52d8ae023742787bd546ef6ad064d0ce95
-
SHA256
ffd9ca9274fd057e773143a2124bbbbc1184988b52d3cf1f9a0f02a3fb0fec6f
-
SHA512
4492b032a59a059b52c7c64226809eaf35a5158538b00e5407723489f2919a6d43c6a901ab12e1989d6b70ee24f4a4387917632ccd48e735f32325eb79422964
-
SSDEEP
98304:Z8A9PZ3PtSp8TdOTSxjKAttHgkWJ0F2yZ4BcbKE2q4+prBw7ExxtClVkoOSfJNAO:rPtI8Td2PAttxWJFBYlwwxxlobhCUW0
Score
3/10
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
-
Suspicious use of AdjustPrivilegeToken 4 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\RAT.exe"C:\Users\Admin\AppData\Local\Temp\RAT.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\system32\msiexec.exeC:\Windows\system32\msiexec.exe /V1⤵
- Suspicious use of AdjustPrivilegeToken
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
6.1MB
-
Filesize
264KB
-
Filesize
6.9MB
-
Filesize
56KB
-
Filesize
6.9MB
-
Filesize
32KB
-
Filesize
96KB
-
Filesize
104KB
-
Filesize
120KB
-
Filesize
104KB
-
Filesize
6.9MB
-
Filesize
4KB
-
Filesize
6.9MB
-
Filesize
6.9MB
-
Filesize
280KB
-
Filesize
6.9MB