Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
01-10-2024 11:54
Static task
static1
Behavioral task
behavioral1
Sample
acb155813c26a162a60a1a907669dcb92063de3f9af831131732ad4c8d464272N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
acb155813c26a162a60a1a907669dcb92063de3f9af831131732ad4c8d464272N.exe
Resource
win10v2004-20240802-en
General
-
Target
acb155813c26a162a60a1a907669dcb92063de3f9af831131732ad4c8d464272N.exe
-
Size
1.4MB
-
MD5
eedb0e1cb4ffa358104f9ea214228550
-
SHA1
1b78abb2218504e56c62126c27824f5b417a127f
-
SHA256
acb155813c26a162a60a1a907669dcb92063de3f9af831131732ad4c8d464272
-
SHA512
beb889dca4595a2780d1cb009f1753b469fccddbfeeb59526459ba2fe5722b63e60ac9932a887893d66a1ac2819fd1bb304153ad151c7d6e4a7b9fcf6d3bd9db
-
SSDEEP
24576:xk70Trcot2+ttwSyHDWIH5OYmHOuX7ukjFFgUmCcXMT20/nkxeSw++s0oQEMV:xkQTACPtt9yjNOYmFu4FF5RccFfkUSwt
Malware Config
Signatures
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language acb155813c26a162a60a1a907669dcb92063de3f9af831131732ad4c8d464272N.exe -
Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 812 acb155813c26a162a60a1a907669dcb92063de3f9af831131732ad4c8d464272N.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\acb155813c26a162a60a1a907669dcb92063de3f9af831131732ad4c8d464272N.exe"C:\Users\Admin\AppData\Local\Temp\acb155813c26a162a60a1a907669dcb92063de3f9af831131732ad4c8d464272N.exe"1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
PID:812